{"action":"Upgrade @directus/app to 13.3.1 or later.","affected":[{"fixed":"13.3.1","introduced":"11.0.0"}],"component":"@directus/app","cve_ids":["CVE-2024-54128"],"ecosystem":"npm","epss":0.00344,"exploited":false,"fixed_versions":["13.3.1"],"ghsa_id":"GHSA-r6wx-627v-gh2f","id":"tcs_01M5KG89QYH21474WT3PY06PNE","modified_at":"2025-11-19T17:50:43Z","published_at":"2024-12-05T22:37:32Z","references":["https://osv.dev/vulnerability/GHSA-r6wx-627v-gh2f","https://github.com/directus/directus/security/advisories/GHSA-r6wx-627v-gh2f","https://nvd.nist.gov/vuln/detail/CVE-2024-54128","https://github.com/directus/directus/commit/4487fb18d5cb09e071b111d2dc0c9d6bcb437633","https://github.com/directus/directus/commit/c89dbb233fbad2fd0cf41eb99d50c6de4e84195d","https://github.com/directus/directus"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"GHSA-r6wx-627v-gh2f","url":"https://osv.dev/vulnerability/GHSA-r6wx-627v-gh2f"}],"summary":"Directus has an HTML Injection in Comment"}