Known Vulnerabilities for Parse-server by Parseplatform
Listed below are 10 of the newest known vulnerabilities associated with "Parse-server" by "Parseplatform".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-77775 json | Headroom's LLM proxy lets a client choose the upstream destination with the x-headroom-base-url request header. _resolve_open... | Not Provided | 2026-08-21 | 2026-08-21 |
| CVE-2026-77070 json | n8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB node's Find, Delete, and Aggr... | Not Provided | 2026-08-20 | 2026-08-21 |
| CVE-2026-77066 json | The scanFeedsResolver in packages/api/src/resolvers/subscriptions/index.ts passes the caller-supplied url straight to axios.g... | Not Provided | 2026-08-20 | 2026-08-21 |
| CVE-2026-76224 json | ArcadeDB before 26.8.1 (arcadedb-gremlin, affected <= 26.7.3) contains a remote code execution vulnerability in its Gremlin q... | Not Provided | 2026-08-19 | 2026-08-20 |
| CVE-2026-72777 json | Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST /api/parse-url endpoint due t... | Not Provided | 2026-08-13 | 2026-08-13 |
| CVE-2026-69192 json | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts... | Not Provided | 2026-08-03 | 2026-08-04 |
| CVE-2026-67201 json | V through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery (SSRF) bypass vulnerability that allows atta... | Not Provided | 2026-07-29 | 2026-07-29 |
| CVE-2026-66034 json | libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH se... | Not Provided | 2026-07-24 | 2026-07-28 |
| CVE-2026-66009 json | Parse Server versions >= 9.0.0 before 9.10.0-alpha.5 and >= 8.2.2 before 8.6.86 return GraphQL validation error messages that... | Not Provided | 2026-07-24 | 2026-07-28 |
| CVE-2026-66008 json | Parse Server versions >= 9.0.0 before 9.10.0-alpha.6 and >= 8.2.2 before 8.6.87 disclose Pointer and Relation target class na... | Not Provided | 2026-07-24 | 2026-07-24 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Parseplatform | Parse-server | 4.9.3 | |||
| Application | Parseplatform | Parse-server | 4.9.2 | |||
| Application | Parseplatform | Parse-server | 4.9.1 | |||
| Application | Parseplatform | Parse-server | 4.9.0 | |||
| Application | Parseplatform | Parse-server | 4.8.5 | |||
| Application | Parseplatform | Parse-server | 4.8.4 | |||
| Application | Parseplatform | Parse-server | 4.8.3 | |||
| Application | Parseplatform | Parse-server | 4.8.2 | |||
| Application | Parseplatform | Parse-server | 4.8.1 | |||
| Application | Parseplatform | Parse-server | 4.8.0 | |||
| Application | Parseplatform | Parse-server | 4.7.0 | |||
| Application | Parseplatform | Parse-server | 4.6.0 | |||
| Application | Parseplatform | Parse-server | 4.5.0 | |||
| Application | Parseplatform | Parse-server | 4.4.0 | |||
| Application | Parseplatform | Parse-server | 4.3.0 | |||
| Application | Parseplatform | Parse-server | 4.2.0 | |||
| Application | Parseplatform | Parse-server | 4.1.0 | |||
| Application | Parseplatform | Parse-server | 4.1.0 | |||
| Application | Parseplatform | Parse-server | 4.0.9 | |||
| Application | Parseplatform | Parse-server | 4.0.8 |