Description
API endpoints have no rate limiting, making them vulnerable to abuse and DoS attacks when public facing.
Affected Files
All routes in app/api/
Suggested Fix
Implement rate limiting using a library like @upstash/ratelimit or Next.js middleware.
Description
API endpoints have no rate limiting, making them vulnerable to abuse and DoS attacks when public facing.
Affected Files
All routes in
app/api/Suggested Fix
Implement rate limiting using a library like
@upstash/ratelimitor Next.js middleware.