[ Vendor · 11 CVEs ]
parse-community
CVEs affecting parse-community published in the last 30 days, plus any parse-community CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-112768 | 19 Oct 2026 | CVSS 6.9 | parse-community parse-serverParse Server before 8.6.99 and 9.0.0 before 9.10.3-alpha.2 evaluates checks against the target account during a user update before authorizing the… | |
| CVE-2026-112769 | 19 Oct 2026 | CVSS 2.3 | parse-community parse-serverParse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does not enforce the create and addField class-level permissions of the _Session class… | |
| CVE-2026-110854 | 14 Oct 2026 | CVSS 8.2 | parse-community parse-serverParse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or password reset emails, causing… | |
| CVE-2026-109954 | 13 Oct 2026 | CVSS 6.5 | parse-community parse-serverParse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 shares transactional batch state across concurrent requests, letting any client's… | |
| CVE-2026-109302 | 12 Oct 2026 | CVSS 3.7 | parse-community parse-serverParse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 applies its GraphQL introspection control only to operation text sent directly with… | |
| CVE-2026-109303 | 12 Oct 2026 | CVSS 4.3 | parse-community parse-serverParse Server before 8.6.93 and 9.0.0 before 9.10.1-alpha.13 does not enforce identity-scoped protectedFields (authenticated, role, or per-user… | |
| CVE-2026-109301 | 12 Oct 2026 | CVSS 5.9 | parse-community parse-serverParse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3 does not resolve file references lacking a URL before passing objects to Cloud Code… | |
| CVE-2026-105828 | 8 Oct 2026 | CVSS 6.3 | parse-community parse-serverParse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 contains an information disclosure vulnerability in which GraphQL validation error… | |
| CVE-2026-101042 | 27 Sep 2026 | CVSS 6.4 | parse-community parse-serverParse Server is an open-source backend server. In versions >= 9.0.0 < 9.10.1-alpha.10 and >= 8.0.2 < 8.6.91, the code-based authentication adapters… | |
| CVE-2026-100631 | 26 Sep 2026 | CVSS 7.5 | parse-community parse-serverParse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-alpha.9, the device token… | |
| CVE-2026-100632 | 26 Sep 2026 | CVSS 6.5 | parse-community parse-serverParse Server is an open-source backend server. In versions >= 9.0.0 and < 9.10.1-alpha.8, and in versions < 8.6.89, LiveQuery evaluates the… |