{"action":"Upgrade directus to 10.13.4 or later.","affected":[{"fixed":"10.13.4","introduced":"10.10.0"},{"fixed":"11.2.2","introduced":"11.0.0-rc.1"}],"component":"directus","cve_ids":["CVE-2024-54128"],"ecosystem":"npm","epss":0.00344,"exploited":false,"fixed_versions":["10.13.4","11.2.2"],"ghsa_id":"GHSA-r6wx-627v-gh2f","id":"tcs_01M5KG89Z1ECZS4GQRNQKZG9CR","modified_at":"2025-11-19T17:50:43Z","published_at":"2024-12-05T22:37:32Z","references":["https://osv.dev/vulnerability/GHSA-r6wx-627v-gh2f","https://github.com/directus/directus/security/advisories/GHSA-r6wx-627v-gh2f","https://nvd.nist.gov/vuln/detail/CVE-2024-54128","https://github.com/directus/directus/commit/4487fb18d5cb09e071b111d2dc0c9d6bcb437633","https://github.com/directus/directus/commit/c89dbb233fbad2fd0cf41eb99d50c6de4e84195d","https://github.com/directus/directus"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"GHSA-r6wx-627v-gh2f#npm/directus","url":"https://osv.dev/vulnerability/GHSA-r6wx-627v-gh2f"}],"summary":"Directus has an HTML Injection in Comment"}