Latest vulnerabilities for "parse platform parse server"

npm/parse-serverParse Server: Stored XSS via trailing-dot filename bypassing file upload extension blocklist

Risk 23

Severity

2.1

First published (updated )

CVE-2026-53724

parseplatform Parse-server Node.jsParse Server: Session field immutability bypass via falsy-value guard

Risk 34

Severity

5.3

First published (updated )

CVE-2026-34574

parseplatform Parse-server Node.jsParse Server: Denial of service via unindexed database query for unconfigured auth providers

Risk 33

Severity

8.7

EPSS

0.08%

First published (updated )

CVE-2026-33538

npm/parse-serverParse Server may crash when uploading file without extension

Risk 45

Severity

7.5

First published (updated )

CVE-2023-46119

npm/parse-serverTrigger `beforeFind` not invoked in internal query pipeline in parse-server

Risk 44

Severity

7.5

First published (updated )

CVE-2023-41058

npm/parse-serverParse Server vulnerable to phishing attack vulnerability that involves uploading malicious HTML file

Risk 39

Severity

6.5

First published (updated )

CVE-2023-32689

parseplatform Parse-server Node.jsParse Server is vulnerable to authentication bypass via spoofing

Risk 59

Severity

8.7

First published (updated )

CVE-2023-22474

npm/parse-serverParse Server vulnerable to Remote Code Execution via prototype pollution in MongoDB BSON parser

Risk 87

Severity

9.8

First published (updated )

CVE-2022-39396

npm/parse-serverParse Server crashes when receiving file download request with invalid byte range

Risk 44

Severity

7.5

First published (updated )

CVE-2022-39313

parseplatform Parse-server Node.jsParse Server subject to Improper Authentication allowing Auth adapter app ID validation to be circumvented

Risk 20

Severity

3.7

First published (updated )

CVE-2022-39231

parseplatform Parse-server Node.jsParse Server subject to Incorrect Resource Transfer Between Spheres

Risk 22

Severity

4.3

First published (updated )

CVE-2022-39225

parseplatform Parse-server Node.jsParse Server vulnerable to brute force guessing of user sensitive data via search patterns

Risk 49

Severity

8.6

First published (updated )

CVE-2022-36079

npm/parse-serverProtected fields exposed via LiveQuery in parse-server

Risk 55

Severity

8.2

First published (updated )

CVE-2022-31112

parseplatform Parse-server Node.jsInvalid file request can crashe parse-server

Risk 43

Severity

7.5

First published (updated )

CVE-2022-31089

parseplatform Parse-server Node.jsAuthentication bypass in Parse Server Apple Game Center auth adapter

Risk 49

Severity

8.6

First published (updated )

CVE-2022-31083

parseplatform Parse-server Node.jsAuthentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter

Risk 43

Severity

7.5

First published (updated )

CVE-2022-24901

parseplatform Parse-server Node.jsCommand Injection in Parse server

Risk 87

Severity

10

First published (updated )

CVE-2022-24760

parseplatform Parse-server Node.jsParse Server stores password in plain text

Risk 44

Severity

7.7

First published (updated )

CVE-2020-26288

parseplatform Parse-server Node.jsImproper session expiration in Parse Server

Risk 22

Severity

4.3

First published (updated )

CVE-2020-15270

Trending

Versions

npm/parse-serverParse Server: Stored XSS via trailing-dot filename bypassing file upload extension blocklist

parseplatform Parse-server Node.jsParse Server: Session field immutability bypass via falsy-value guard

parseplatform Parse-server Node.jsParse Server: Denial of service via unindexed database query for unconfigured auth providers

npm/parse-serverParse Server may crash when uploading file without extension

npm/parse-serverTrigger `beforeFind` not invoked in internal query pipeline in parse-server

Don't miss critical vulnerabilities

npm/parse-serverParse Server vulnerable to phishing attack vulnerability that involves uploading malicious HTML file

parseplatform Parse-server Node.jsParse Server is vulnerable to authentication bypass via spoofing

npm/parse-serverParse Server vulnerable to Remote Code Execution via prototype pollution in MongoDB BSON parser

npm/parse-serverParse Server crashes when receiving file download request with invalid byte range

parseplatform Parse-server Node.jsParse Server subject to Improper Authentication allowing Auth adapter app ID validation to be circumvented

Don't miss critical vulnerabilities

parseplatform Parse-server Node.jsParse Server subject to Incorrect Resource Transfer Between Spheres

parseplatform Parse-server Node.jsParse Server vulnerable to brute force guessing of user sensitive data via search patterns

npm/parse-serverProtected fields exposed via LiveQuery in parse-server

parseplatform Parse-server Node.jsInvalid file request can crashe parse-server

parseplatform Parse-server Node.jsAuthentication bypass in Parse Server Apple Game Center auth adapter

Don't miss critical vulnerabilities

parseplatform Parse-server Node.jsAuthentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter

parseplatform Parse-server Node.jsCommand Injection in Parse server

parseplatform Parse-server Node.jsParse Server stores password in plain text

parseplatform Parse-server Node.jsImproper session expiration in Parse Server

Company

Resources

Contact