Browse Security Advisories
Security Advisories for parse-server for https://github.com/parse-community/parse-server in npm Clear Filters
High
11 months ago
Parse Server's custom object ID allows to acquire role privileges
npm
parse-server
Critical
about 1 year ago
ZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability
npm
parse-server
Critical
over 1 year ago
Server crashes on invalid Cloud Function or Cloud Job name
npm
parse-server
Critical
over 1 year ago
ZDI-CAN-19105: Parse Server literalizeRegexPart SQL Injection
npm
parse-server
High
almost 2 years ago
Parse Server may crash when uploading file without extension
npm
parse-server
High
almost 2 years ago
Trigger `beforeFind` not invoked in internal query pipeline when fetching pointer
npm
parse-server
Critical
about 2 years ago
Parse Server vulnerable to remote code execution via MongoDB BSON parser through prototype pollution
npm
parse-server
Moderate
about 2 years ago
Phishing attack vulnerability by uploading malicious HTML file
npm
parse-server
High
over 2 years ago
Parse Server option `masterKeyIps` vulnerability to IP spoofing
npm
parse-server
High
almost 3 years ago
Parse Server is vulnerable to Prototype Pollution via Cloud Code Webhooks
npm
parse-server
High
almost 3 years ago
Parse Server vulnerable to Prototype Pollution via Cloud Code Webhooks or Cloud Code Triggers
npm
parse-server
Critical
almost 3 years ago
Remote code execution via MongoDB BSON parser through prototype pollution
npm
parse-server
High
almost 3 years ago
parse-server crashes when receiving file download request with invalid byte range
npm
parse-server
Low
almost 3 years ago
parse-server auth adapter app ID validation can be circumvented
npm
parse-server
Moderate
almost 3 years ago
parse-server's session object properties can be updated by foreign user if object ID is known
npm
parse-server
High
almost 3 years ago
Parse Server vulnerable to brute force guessing of user sensitive data via search patterns
npm
parse-server
High
about 3 years ago
Authentication bypass vulnerability in Apple Game Center auth adapter
npm
parse-server
High
over 3 years ago
Authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter
npm
parse-server
Critical
over 3 years ago
Command injection in Parse Server through prototype pollution
npm
parse-server
Moderate
almost 4 years ago
parse-server new anonymous user session acts as if it's created with password
npm
parse-server
Filter by Severity
Filter by Ecosystem
maven
6,768
packagist
5,381
pypi
4,875
npm
4,236
go
2,872
nuget
1,702
cargo
1,075
rubygems
928
hex
37
swift
36
actions
34
pub
10
Filter by Package
directus
39
parse-server
33
electron
28
next
26
@openzeppelin/contracts-upgradeable
22
@openzeppelin/contracts
21
flowise
17
tinymce
16
sequelize
16
ckeditor4
15
ghost
15
undici
15
swagger-ui
14
angular
14
joplin
14
vite
13
nodebb
13
strapi
13
vm2
12
marked
12
nocodb
11
handlebars
11
TinyMCE
11
bootstrap
11
matrix-js-sdk
11
tinymce/tinymce
11
twbs/bootstrap
9
uptime-kuma
9
@evershop/evershop
9
bootstrap
9
matrix-appservice-irc
9
systeminformation
9
org.webjars:bootstrap
9
serve
9
bootstrap
9
n8n
9
next-auth
9
matrix-react-sdk
9
@strapi/strapi
9
steal
8
tar
8
shescape
8
node-forge
8
editor.md
8
validator
8
npm
8
jquery-rails
8
dompurify
8
@haxtheweb/haxcms-nodejs
8
org.webjars.npm:jquery
8
express-cart
8
url-parse
8
@directus/api
8
urijs
8
jquery
8
elliptic
8
jsrsasign
8
total.js
7
lodash
7
jQuery.UI.Combined
7
vega
7
org.webjars.npm:jquery-ui
7
jquery-ui-rails
7
bootstrap-sass
7
sanitize-html
7
lodash-rails
7
jquery-ui
7
mermaid
7
jQuery
7
mongoose
7
hermes-engine
7
bootstrap.sass
7
bootstrap-sass
7
snyk-broker
7
hapi
7
@strapi/plugin-users-permissions
6
openpgp
6
mattermost-desktop
6
aaptjs
6
tarteaucitronjs
6
parse-url
6
prismjs
6
@sveltejs/kit
6
safe-eval
6
axios
6
rsshub
6
@backstage/plugin-scaffolder-backend
5
dojo
5
froala-editor
5
@keystone-6/core
5
@lobehub/chat
5
yarn
5
passport-wsfed-saml2
5
fastify
5
vditor
5
mysql2
5
public
5
keystone
5
better-auth
5
express
5
@saltcorn/server
5
ua-parser-js
5
katex
5
trix
5
astro
5
total4
5
rendertron
5
ws
5
sweetalert2
5
aws-cdk-lib
5
ejs
5
lodash-es
5
xlsx
5
xml-crypto
4
vue-i18n
4
remarkable
4
jsonwebtoken
4
awsiotsdk
4
@apollo/gateway
4
@node-saml/node-saml
4
code-server
4
nuxt
4
muhammara
4
ecstatic
4
pnpm
4
@anthropic-ai/claude-code
4
@auth0/nextjs-auth0
4
safer-eval
4
apostrophe
4
generator-jhipster
4
qs
4
simple-git
4
aws-iot-device-sdk-v2
4
petite-vue-i18n
4
mongo-express
4
valine
4
realms-shim
4
ses
4
auth0-lock
4
simple-markdown
4
vega-functions
4
@finos/git-proxy
4
hummus
4
yui
4
glance
4
auth0-js
4
materialize-css
4
jquery-validation
4
follow-redirects
4
software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk
4
erxes
4
engine.io
4
fast-xml-parser
4
mongosh
4
convert-svg-core
4
jspdf
4
multer
4
@intlify/vue-i18n-core
4
apollo-server-core
4
hono
4
moment
4
meshcentral
4
snyk
4
agnai
3
dns-sync
3
@intlify/core-base
3
slpjs
3
jose
3
blamer
3
dset
3
xdLocalStorage
3
passport-saml
3
yapi-vendor
3
mxgraph
3
sails
3
docsify
3
connect
3
llhttp
3
m-server
3
open-webui
3
ftp-srv
3
highcharts
3
socket.io-file
3
org.webjars.npm:xlsx
3
postcss
3
@soketi/soketi
3
uap-core
3
@intlify/core
3
django-tinymce
3
@strapi/utils
3
localhost-now
3
wrangler
3
libxmljs
3
json-pointer
3
serialize-javascript
3
@cubejs-backend/api-gateway
3
jointjs
3
@janhq/core
3
slp-validate
3
webpack-dev-server
3