GHSA-6q22-g298-grjh
High · 7.5CVSS
7.5
EPSS
—
Published
Apr 4, 2026
CISA due date
—
The record
Directus: Unauthenticated Denial of Service via GraphQL Alias Amplification of Expensive Health Check Resolver
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | directus | 0 | 11.17.0 |
Related vulnerabilities
- CVE-2026-39942 Directus is a real-time API and App dashboard for managing SQL database content. Also affects directus
- CVE-2026-39943 Directus is a real-time API and App dashboard for managing SQL database content. Also affects directus
- CVE-2026-35410 Directus is a real-time API and App dashboard for managing SQL database content. Also affects directus
- CVE-2026-35411 Directus is a real-time API and App dashboard for managing SQL database content. Also affects directus
- CVE-2026-35412 Directus is a real-time API and App dashboard for managing SQL database content. Also affects directus
- CVE-2026-35441 Directus is a real-time API and App dashboard for managing SQL database content. Also affects directus
- CVE-2026-35413 Directus is a real-time API and App dashboard for managing SQL database content. Also affects directus
- CVE-2026-35442 Directus is a real-time API and App dashboard for managing SQL database content. Also affects directus