{"action":"Upgrade directus to 11.9.0 or later.","affected":[{"fixed":"11.9.0","introduced":"0"}],"component":"directus","cve_ids":["CVE-2025-53887"],"ecosystem":"npm","epss":0.01019,"exploited":false,"fixed_versions":["11.9.0"],"ghsa_id":"GHSA-rmjh-cf9q-pv7q","id":"tcs_01M5KG9DW00MA11462VAGRMD73","modified_at":"2025-07-15T16:12:14.794723Z","published_at":"2025-07-15T15:29:38Z","references":["https://osv.dev/vulnerability/GHSA-rmjh-cf9q-pv7q","https://github.com/directus/directus/security/advisories/GHSA-rmjh-cf9q-pv7q","https://nvd.nist.gov/vuln/detail/CVE-2025-53887","https://github.com/directus/directus/pull/25353","https://github.com/directus/directus/commit/e74f3e4e92edc33b5f83eefb001a3d2a85af17a3","https://github.com/directus/directus","https://github.com/directus/directus/releases/tag/v11.9.0"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-rmjh-cf9q-pv7q","url":"https://osv.dev/vulnerability/GHSA-rmjh-cf9q-pv7q"}],"summary":"Directus' exact version number is exposed by the OpenAPI Spec"}