Known Vulnerabilities for Parse-server by Parse-community
Listed below are 10 of the newest known vulnerabilities associated with "Parse-server" by "Parse-community".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-121415 json | Parse Server before 8.6.111 and 9.0.0 before 9.10.6-alpha.3 on MongoDB skips field type validation for null-valued dot notati... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-121414 json | Parse Server before 8.6.110 and 9.0.0 before 9.10.6-alpha.2 fails to contain a serialization error when an object update uses... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-121413 json | Parse Server before 8.6.112 and 9.0.0 before 9.10.6-alpha.4 contains an authorization bypass in the session upgrade endpoint,... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-120416 json | A security vulnerability has been detected in AndyFactory newspaper4k up to 0.9.6. This affects the function Article.parse of... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-120310 json | Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 returns stored field values in object update responses without ch... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-119571 json | Parse Server from 9.7.0 before 9.10.5-alpha.10 contains an authorization flaw that applies _Installation updates addressed by... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-119570 json | Parse Server from 9.7.0 before 9.10.5-alpha.7 contains an information disclosure vulnerability that allows clients to receive... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-119569 json | Parse Server before 8.6.108 and 9.0.0 before 9.10.5-alpha.9 contains a prototype pollution vulnerability because user-control... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-119276 json | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7,... | Not Provided | 2026-10-29 | 2026-10-30 |
| CVE-2026-119126 json | Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 mishandles dot notation keys with null or undefined values when b... | Not Provided | 2026-10-29 | 2026-10-29 |