Latest vulnerabilities for vendor "parse"

Where

Sort:

Software

parse parse server

parse server

parseplatform parse-server node.js

parse platform server

Parse Parse ServerParse Server 9.0.0 Information Disclosure via GraphQL Error Messages

Risk 29

Severity

6.3

First published (updated )

CVE-2026-66009

Parse Parse ServerParse Server 9.0.0 Information Disclosure via GraphQL Error Messages

Risk 29

Severity

6.3

First published (updated )

CVE-2026-66008

Parse Parse ServerParse Server 9.0.0 Schema Disclosure via GraphQL Variable Coercion

Risk 33

Severity

6.9

First published (updated )

CVE-2026-64627

Parse Parse ServerParse Server 9.0.0 Stored XSS via malformed Content-Type

Risk 23

Severity

2.1

First published (updated )

CVE-2026-61448

Parse Parse ServerParse Server: LiveQuery discloses object data to a subscriber across an ACL read-access change

Risk 15

Severity

2.3

First published (updated )

CVE-2026-57481

Parse Parse ServerParse Server: Denial of service via exponential-time processing of deeply nested query operators

Risk 47

Severity

8.7

First published (updated )

CVE-2026-57480

Parse Parse ServerParse Server - Arbitrary Code Execution via Malicious Version Tags

Risk 68

Severity

7.7

First published (updated )

CVE-2021-47987

parseplatform Parse-server Node.jsParse Server - Unreviewed Code Execution via Malicious Version Tags

Risk 68

Severity

7.7

First published (updated )

CVE-2021-47986

Parse Parse ServerParse Server: Endpoints `/login` and `/verifyPassword` disclose MFA secrets and protected fields when `_User` get is denied

Risk 32

Severity

5.9

First published (updated )

CVE-2026-53725

parseplatform Parse-server Node.jsParse Server crash via deeply nested query condition operators

Risk 33

Severity

8.7

EPSS

0.02%

First published (updated )

CVE-2026-32944

parseplatform Parse-server Node.jsParse Server OAuth2 authentication adapter account takeover via identity spoofing

Risk 41

Severity

8.8

EPSS

0.07%

First published (updated )

CVE-2026-30967

Parse Parse ServerParse Server allows public `explain` queries which may expose sensitive database performance information and schema details

Risk 33

Severity

6.9

First published (updated )

CVE-2025-64502

Parse Javascript SDKParse Javascript SDK vulnerable to prototype pollution in `Parse.Object` and internal APIs

Risk 39

Severity

6.4

First published (updated )

CVE-2025-62374

Parse parseparse is a package designed to parse JavaScript SDK. A Prototype Pollution vulnerability in the Sing…

Risk 38

Severity

6.5

First published (updated )

CVE-2025-57324

npm/parse-serverParse Server exposes the data schema via GraphQL API

Risk 27

Severity

5.3

First published (updated )

CVE-2025-53364

npm/parse-serverParse Server has an OAuth login vulnerability

Risk 34

Severity

6.9

EPSS

0.07%

First published (updated )

CVE-2025-30168

Parse Parse ServerParse Server literalizeRegexPart SQL Injection Information Disclosure Vulnerability

Risk 23

First published (updated )

Advisory

ZDI-24-900

Parse Parse ServerZDI-24-900: Parse Server literalizeRegexPart SQL Injection Information Disclosure Vulnerability

Risk 23

First published (updated )

ZDI-CAN-19105

Parse Parse ServerParse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability

Risk 23

First published (updated )

Advisory

ZDI-24-896

Parse Parse ServerZDI-24-896: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability

Risk 23

First published (updated )

ZDI-CAN-23894

Parse ServerParse Server transformUpdate Prototype Pollution Remote Code Execution Vulnerability

Risk 51

First published (updated )

Advisory

ZDI-23-1160

Parse Parse ServerZDI-23-1160: Parse Server transformUpdate Prototype Pollution Remote Code Execution Vulnerability

Risk 51

First published (updated )

ZDI-CAN-19904

Trending

Vendor Risk Score

Software

Parse Parse ServerParse Server 9.0.0 Information Disclosure via GraphQL Error Messages

Parse Parse ServerParse Server 9.0.0 Information Disclosure via GraphQL Error Messages

Parse Parse ServerParse Server 9.0.0 Schema Disclosure via GraphQL Variable Coercion

Parse Parse ServerParse Server 9.0.0 Stored XSS via malformed Content-Type

Parse Parse ServerParse Server: LiveQuery discloses object data to a subscriber across an ACL read-access change

Don't miss critical vulnerabilities

Parse Parse ServerParse Server: Denial of service via exponential-time processing of deeply nested query operators

Parse Parse ServerParse Server - Arbitrary Code Execution via Malicious Version Tags

parseplatform Parse-server Node.jsParse Server - Unreviewed Code Execution via Malicious Version Tags

Parse Parse ServerParse Server: Endpoints `/login` and `/verifyPassword` disclose MFA secrets and protected fields when `_User` get is denied

parseplatform Parse-server Node.jsParse Server crash via deeply nested query condition operators

Don't miss critical vulnerabilities

parseplatform Parse-server Node.jsParse Server OAuth2 authentication adapter account takeover via identity spoofing

Parse Parse ServerParse Server allows public `explain` queries which may expose sensitive database performance information and schema details

Parse Javascript SDKParse Javascript SDK vulnerable to prototype pollution in `Parse.Object` and internal APIs

Parse parseparse is a package designed to parse JavaScript SDK. A Prototype Pollution vulnerability in the Sing…

npm/parse-serverParse Server exposes the data schema via GraphQL API

Don't miss critical vulnerabilities

npm/parse-serverParse Server has an OAuth login vulnerability

Parse Parse ServerParse Server literalizeRegexPart SQL Injection Information Disclosure Vulnerability

Parse Parse ServerZDI-24-900: Parse Server literalizeRegexPart SQL Injection Information Disclosure Vulnerability

Parse Parse ServerParse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability

Parse Parse ServerZDI-24-896: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability

Don't miss critical vulnerabilities

Parse ServerParse Server transformUpdate Prototype Pollution Remote Code Execution Vulnerability

Parse Parse ServerZDI-23-1160: Parse Server transformUpdate Prototype Pollution Remote Code Execution Vulnerability

Company

Resources

Contact