VDB
Sign up
MEDIUM6.5

GHSA-3gvp-54v2-2jrp

Directus API vulnerable to denial of service

Quick fix

GHSA-3gvp-54v2-2jrp — directus: upgrade to the fixed version with the command below.

npm install directus@2.2.1

Details

An issue found in Directus API v.2.2.0 allows a remote attacker to cause a denial of service via a great amount of HTTP requests.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/directus
Introduced in: 2.2.0Fixed in: 2.2.1
Fixnpm install directus@2.2.1

References