← All credits

Santiago Alvarez

2 vulnerability records and advisories credit this contributor.

CVE-2026-10716
Directus <12.1.0 - Authenticated time-based SQL injection in PostgreSQL/PostGIS collection creation
CVE-2026-11982
Stored XSS via missing XSS safety check in Admin2 Pages API partial validation