If you believe you have discovered a security issue within d11f, please open a new private security vulnerability report through https://github.com/nguyenhy/d11f/security/advisories/new. We will then track the fix using a GitHub Security Advisory on this repository.
Note: d11f is a fork of Directus. If the vulnerability exists in the unmodified upstream base rather than in d11f's own changes, it should be reported to Directus directly instead (see upstream's security policy).
We value members of the independent security research community who find vulnerabilities and work with us so proper fixes can be issued. In order to receive credit, security researchers must follow responsible disclosure practices, including:
- They do not publish the vulnerability prior to a fix being released
- They do not divulge exact details of the issue, for example, through exploits or proof-of-concepts