Known Vulnerabilities for Parse-server by Parse-community
Listed below are 10 of the newest known vulnerabilities associated with "Parse-server" by "Parse-community".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-109954 json | Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 shares transactional batch state across concurrent requests,... | Not Provided | 2026-10-13 | 2026-10-13 |
| CVE-2026-109303 json | Parse Server before 8.6.93 and 9.0.0 before 9.10.1-alpha.13 does not enforce identity-scoped protectedFields (authenticated, ... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-109302 json | Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 applies its GraphQL introspection control only to operation... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-109301 json | Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3 does not resolve file references lacking a URL before passing obje... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-105828 json | Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 contains an information disclosure vulnerability in which G... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-102904 json | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architectur... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-102722 json | In the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's `227` reply. Validation only covers t... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-101042 json | Parse Server is an open-source backend server. In versions >= 9.0.0 < 9.10.1-alpha.10 and >= 8.0.2 < 8.6.91, the code-based a... | Not Provided | 2026-09-27 | 2026-09-30 |
| CVE-2026-100720 json | Froxlor 2.0.0 through 2.3.10 is vulnerable to stored cross-site scripting. When a customer (the lowest-privileged authenticat... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100632 json | Parse Server is an open-source backend server. In versions >= 9.0.0 and < 9.10.1-alpha.8, and in versions < 8.6.89, LiveQuery... | Not Provided | 2026-09-26 | 2026-09-28 |