Known Vulnerabilities for Parse-server by Parse-community
Listed below are 10 of the newest known vulnerabilities associated with "Parse-server" by "Parse-community".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-69192 json | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts... | Not Provided | 2026-08-03 | 2026-08-04 |
| CVE-2026-67201 json | V through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery (SSRF) bypass vulnerability that allows atta... | Not Provided | 2026-07-29 | 2026-07-29 |
| CVE-2026-66034 json | libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH se... | Not Provided | 2026-07-24 | 2026-07-28 |
| CVE-2026-66009 json | Parse Server versions >= 9.0.0 before 9.10.0-alpha.5 and >= 8.2.2 before 8.6.86 return GraphQL validation error messages that... | Not Provided | 2026-07-24 | 2026-07-28 |
| CVE-2026-66008 json | Parse Server versions >= 9.0.0 before 9.10.0-alpha.6 and >= 8.2.2 before 8.6.87 disclose Pointer and Relation target class na... | Not Provided | 2026-07-24 | 2026-07-24 |
| CVE-2026-64627 json | Parse Server versions >= 9.0.0 before 9.10.0-alpha.4 and versions before 8.6.85 contain a schema disclosure vulnerability. Wh... | Not Provided | 2026-07-21 | 2026-07-21 |
| CVE-2026-61448 json | Parse Server is affected by a stored cross-site scripting (XSS) vulnerability in versions >= 9.0.0, < 9.10.0-alpha.2 and <= 8... | Not Provided | 2026-07-11 | 2026-07-13 |
| CVE-2026-59249 json | Inconsistent interpretation of HTTP requests (HTTP response smuggling) vulnerability in elixir-mint mint allows a malicious H... | Not Provided | 2026-07-16 | 2026-07-16 |
| CVE-2026-58051 json | libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing pop... | Not Provided | 2026-06-28 | 2026-06-29 |
| CVE-2026-57481 json | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.9.1-alpha.... | Not Provided | 2026-07-08 | 2026-07-10 |