Vulnerabilidades en parse-community
156 resultadosCVE-2025-68115MEDIUMParse Server vulnerable to Cross-Site Scripting (XSS) via Unescaped Mustache Template VariablesEPSS 0.2%CVE-2026-109954HIGHParse Server 9.0.0 before 9.10.2-alpha.5 Transactional Batch Request Write InterferenceEPSS 0.2%CVE-2026-34574MEDIUMParse Server: Session field immutability bypass via falsy-value guardEPSS 0.2%CVE-2026-101042HIGHParse Server 9.0.0 Authentication Bypass via Unverified Provider IdentityEPSS 0.2%CVE-2026-120310LOWParse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 Information Disclosure via Object Update ResponseEPSS 0.2%CVE-2026-122301LOWParse Server before 8.6.114 and 9.0.0 before 9.10.6-alpha.6 Information Disclosure via Object Create ResponseEPSS 0.2%CVE-2026-34373MEDIUMParse Server: GraphQL API endpoint ignores CORS origin restrictionEPSS 0.2%CVE-2026-109303MEDIUMParse Server before 8.6.93 and 9.0.0 before 9.10.1-alpha.13 protectedFields Bypass via Relation Count QueryEPSS 0.2%CVE-2026-27804CRITICALParse Server: Account takeover via JWT algorithm confusion in Google auth adapterEPSS 0.2%CVE-2026-39381MEDIUMParse Server's Endpoint `/sessions/me` bypasses `_Session` `protectedFields`EPSS 0.2%CVE-2026-33624LOWParse Server: MFA recovery code single-use bypass via concurrent requestsEPSS 0.2%CVE-2021-47986HIGHParse Server - Unreviewed Code Execution via Malicious Version TagsEPSS 0.2%CVE-2021-47987HIGHParse Server - Arbitrary Code Execution via Malicious Version TagsEPSS 0.2%CVE-2026-35200LOWParse Server has a file upload Content-Type override via extension mismatchEPSS 0.2%CVE-2026-27609HIGHParse Dashboard Missing CSRF Protection on Agent EndpointEPSS 0.2%CVE-2026-123487HIGHParse Server 9.0.0 before 9.10.7-alpha.1 ReDoS via Email Validation RegexEPSS —