https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 06:39:31 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-228968 EUVD-2026-228968 https://cve.radiocsirt.org/vuln/euvd-2026-228968 https://cve.radiocsirt.org/vuln/fkie_cve-2022-26969 <p>In Directus before 9.7.0, the default settings of CORS_ORIGIN and CORS_ENABLED are true.</p> <p>In Directus before 9.7.0, the default settings of CORS_ORIGIN and CORS_ENABLED are true.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-26969 https://cve.radiocsirt.org/vuln/ghsa-g27j-74fp-xfpr <p><strong>Affected:</strong> npm: directus</p> <p>### Impact</p> <p>The default value for the `CORS_ENABLED` and `CORS_ORIGIN` configuration was set to be very permissive by default. This could lead to unauthorized access in uncontrolled environments when the configuration hasn&#39;t been changed.</p> <p>### Patches</p> <p>The default values for CORS have been changed in https://github.com/directus/directus/pull/12022 which is released under 9.7.0</p> <p>### Workarounds</p> <p>Configure the CORS environment variables to match your project&#39;s usage, rather than leaving them at the (permissive) defaults.</p> <p>### For more information If you have any questions or comments about this advisory: * Open an issue in [directus/directus](https://github.com/directus/directus) * Email us at [security@directus.io](mailto:security@directus.io)</p> <p><strong>Affected:</strong> npm: directus</p> <p>### Impact</p> <p>The default value for the `CORS_ENABLED` and `CORS_ORIGIN` configuration was set to be very permissive by default. This could lead to unauthorized access in uncontrolled environments when the configuration hasn&#39;t been changed.</p> <p>### Patches</p> <p>The default values for CORS have been changed in https://github.com/directus/directus/pull/12022 which is released under 9.7.0</p> <p>### Workarounds</p> <p>Configure the CORS environment variables to match your project&#39;s usage, rather than leaving them at the (permissive) defaults.</p> <p>### For more information If you have any questions or comments about this advisory: * Open an issue in [directus/directus](https://github.com/directus/directus) * Email us at [security@directus.io](mailto:security@directus.io)</p> https://cve.radiocsirt.org/vuln/ghsa-g27j-74fp-xfpr https://cve.radiocsirt.org/vuln/gsd-2022-26969 gsd-2022-26969 https://cve.radiocsirt.org/vuln/gsd-2022-26969