{"action":"Upgrade directus to 11.9.0 or later.","affected":[{"fixed":"11.9.0","introduced":"9.0.0"}],"component":"directus","cve_ids":["CVE-2025-53885"],"ecosystem":"npm","epss":0.00202,"exploited":false,"fixed_versions":["11.9.0"],"ghsa_id":"GHSA-x3vm-88hf-gpxp","id":"tcs_01M5KGGRJACMDN3C6AEQD0GSAF","modified_at":"2025-07-15T16:27:18.997140Z","published_at":"2025-07-15T15:18:06Z","references":["https://osv.dev/vulnerability/GHSA-x3vm-88hf-gpxp","https://github.com/directus/directus/security/advisories/GHSA-x3vm-88hf-gpxp","https://nvd.nist.gov/vuln/detail/CVE-2025-53885","https://github.com/directus/directus/pull/25355","https://github.com/directus/directus/commit/859f664f56fb50401c407b095889cea38ff580e5","https://github.com/directus/directus","https://github.com/directus/directus/releases/tag/v11.9.0"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GHSA-x3vm-88hf-gpxp","url":"https://osv.dev/vulnerability/GHSA-x3vm-88hf-gpxp"}],"summary":"Directus is vulnerable to sensitive data exposure as user data is not being redacted when logged"}