{"action":"Upgrade directus to 10.8.3 or later.","affected":[{"fixed":"10.8.3","introduced":"0"}],"component":"directus","cve_ids":["CVE-2024-27295"],"ecosystem":"npm","epss":0.00702,"exploited":false,"fixed_versions":["10.8.3"],"ghsa_id":"GHSA-qw9g-7549-7wg5","id":"tcs_01M5KG79KWNQPNHW522SYDNVES","modified_at":"2026-09-10T03:50:10.745805107Z","published_at":"2024-03-01T16:58:20Z","references":["https://osv.dev/vulnerability/GHSA-qw9g-7549-7wg5","https://github.com/directus/directus/security/advisories/GHSA-qw9g-7549-7wg5","https://nvd.nist.gov/vuln/detail/CVE-2024-27295","https://github.com/directus/directus/commit/a8ef790ea2d28b1727f9027d99bd360920d57919","https://dev.mysql.com/doc/refman/8.0/en/charset-unicode-sets.html","https://github.com/directus/directus","https://www.monolune.com/articles/what-is-the-utf8mb4_0900_ai_ci-collation"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-qw9g-7549-7wg5","url":"https://osv.dev/vulnerability/GHSA-qw9g-7549-7wg5"}],"summary":"Directus has MySQL accent insensitive email matching"}