{"action":"Upgrade @directus/api to 21.0.0 or later.","affected":[{"fixed":"21.0.0","introduced":"0"},{"fixed":"22.1.1","introduced":"22.0.0"}],"component":"@directus/api","cve_ids":["CVE-2024-46990"],"ecosystem":"npm","epss":0.00467,"exploited":false,"fixed_versions":["21.0.0","22.1.1"],"ghsa_id":"GHSA-68g8-c275-xf2m","id":"tcs_01M5KF6A2W0HSDT3GPC55AHCS2","modified_at":"2024-09-18T19:25:25Z","published_at":"2024-09-18T17:42:05Z","references":["https://osv.dev/vulnerability/GHSA-68g8-c275-xf2m","https://github.com/directus/directus/security/advisories/GHSA-68g8-c275-xf2m","https://nvd.nist.gov/vuln/detail/CVE-2024-46990","https://github.com/directus/directus/commit/4aace0bbe57232e38cd6a287ee475293e46dc91b","https://github.com/directus/directus/commit/769fa22797bff5a9231599883b391e013f122e52","https://github.com/directus/directus/commit/8cbf943b65fd4a763d09a5fdbba8996b1e7797ff","https://github.com/directus/directus/commit/c1f3ccc681595038d094ce110ddeee38cb38f431","https://github.com/directus/directus"],"severity":{"label":"medium","score":5},"sources":[{"source":"osv","source_id":"GHSA-68g8-c275-xf2m#npm/@directus/api","url":"https://osv.dev/vulnerability/GHSA-68g8-c275-xf2m"}],"summary":"Directus vulnerable to SSRF Loopback IP filter bypass"}