parse-community vulnerabilities

CVEs per yearBy the year they were published

1. 20204
2. 20213
3. 202212
4. 20236
5. 20244
6. 20258
7. 2026118

Newest CVEs

• CVE-2026-122301

  Parse Server before 8.6.114 and 9.0.0 before 9.10.6-alpha.6 Information Disclosure via Object Create Response

  parse-community · parse-server

  Low2.3
• CVE-2026-121965

  Parse Server before 8.6.113 and 9.10.6-alpha.5 Prototype Pollution via Dot Notation Key

  parse-community · parse-server

  Medium6.0
• CVE-2026-121415

  Parse Server before 8.6.111 and 9.0.0 before 9.10.6-alpha.3 Field Corruption via Null Dot Notation Key

  parse-community · parse-server

  Medium6.3
• CVE-2026-121414

  Parse Server before 8.6.110 and 9.0.0 before 9.10.6-alpha.2 Denial of Service via afterSave Pointer Update

  parse-community · parse-server

  High8.2
• CVE-2026-121413

  Parse Server before 8.6.112 and 9.0.0 before 9.10.6-alpha.4 Session Permission Bypass via upgradeToRevocableSession

  parse-community · parse-server

  Low2.3
• CVE-2026-120310

  Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 Information Disclosure via Object Update Response

  parse-community · parse-server

  Low2.3
• CVE-2026-119571

  Parse Server 9.7.0 before 9.10.5-alpha.10 Installation Update Misdirection via Installation ID

  parse-community · parse-server

  Medium6.3
• CVE-2026-119570

  Parse Server 9.7.0 before 9.10.5-alpha.7 Protected Field Exposure in Save Responses

  parse-community · parse-server

  Low2.3
• CVE-2026-119569

  Parse Server 9.0.0 before 9.10.5-alpha.9 Prototype Pollution Denial of Service

  parse-community · parse-server

  Medium6.0
• CVE-2026-119126

  Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 afterSave Trigger and LiveQuery Bypass via Dot Notation Keys

  parse-community · parse-server

  Low2.3