Known Vulnerabilities for Parse-SDK-JS by Parse-community
Listed below are 10 of the newest known vulnerabilities associated with "Parse-SDK-JS" by "Parse-community".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-116815 json | OpenPanel before 3.0.0 contains an improper escaping vulnerability in sankey.service.ts that allows authenticated project mem... | Not Provided | 2026-10-27 | 2026-10-26 |
| CVE-2026-116801 json | Parse Server before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 does not validate the owning object reference in $relatedTo relat... | Not Provided | 2026-10-27 | 2026-10-27 |
| CVE-2026-116587 json | Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support ... | Not Provided | 2026-10-26 | 2026-10-27 |
| CVE-2026-116586 json | Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support ... | Not Provided | 2026-10-26 | 2026-10-26 |
| CVE-2026-116165 json | Parse Server before 8.6.101 and 9.0.0 before 9.10.4-alpha.4 contains a missing authorization vulnerability on MongoDB deploym... | Not Provided | 2026-10-25 | 2026-10-25 |
| CVE-2026-116164 json | Parse Server before 8.6.100 and 9.0.0 before 9.10.4-alpha.3 does not reject reserved internal field names in client object wr... | Not Provided | 2026-10-25 | 2026-10-25 |
| CVE-2026-116163 json | Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 contains an authentication bypass because the validateSetUp, vali... | Not Provided | 2026-10-25 | 2026-10-26 |
| CVE-2026-116162 json | Parse Server before 8.6.104 and 9.0.0 before 9.10.5-alpha.5 saves the entire login request with master privileges when issuin... | Not Provided | 2026-10-25 | 2026-10-25 |
| CVE-2026-116161 json | Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains an information disclosure vulnerability in LiveQuery. It... | Not Provided | 2026-10-25 | 2026-10-25 |
| CVE-2026-115700 json | Interpretation Conflict vulnerability in hackney_url in benoitc hackney allows Server Side Request Forgery via a percent-enco... | Not Provided | 2026-10-26 | 2026-10-26 |