How many CVEs does parse-community parse-server have?

parse-community parse-server has 122 published CVE records since 2019.

How many parse-community parse-server CVEs are in CISA KEV?

None of parse-community parse-server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for parse-community parse-server vulnerabilities?

Yes — 4 of parse-community parse-server's CVEs have a known public exploit.

Which versions of parse-community parse-server are affected?

1,323 distinct parse-community parse-server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in parse-community parse-server CVEs?

parse-community parse-server's CVEs most often map to these CWE weakness types: CWE-863 (Incorrect Authorization), CWE-287 (Improper Authentication), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-1321 (Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')).

How many critical parse-community parse-server vulnerabilities are there?

parse-community parse-server has 18 critical and 51 high-severity CVEs.

What is the average severity of parse-community parse-server CVEs?

The average CVSS base score across parse-community parse-server's scored CVEs is 7.1.

parse-community parse-server Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every parse-community parse-server version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

2.0.088 CVEs
2.0.188 CVEs
2.0.288 CVEs
2.0.388 CVEs
2.0.488 CVEs
2.0.588 CVEs
2.0.688 CVEs
2.0.788 CVEs
2.0.888 CVEs
2.1.088 CVEs
2.1.188 CVEs
2.1.288 CVEs
2.1.388 CVEs
2.1.488 CVEs
2.1.588 CVEs
2.1.688 CVEs
2.2.088 CVEs
2.2.188 CVEs
2.2.1088 CVEs
2.2.1188 CVEs
2.2.1288 CVEs
2.2.1388 CVEs
2.2.1488 CVEs
2.2.1588 CVEs
2.2.1688 CVEs
2.2.1788 CVEs
2.2.1888 CVEs
2.2.1988 CVEs
2.2.288 CVEs
2.2.2088 CVEs
2.2.2188 CVEs
2.2.2288 CVEs
2.2.2388 CVEs
2.2.2488 CVEs
2.2.2588 CVEs
2.2.25-beta.188 CVEs
2.2.388 CVEs
2.2.488 CVEs
2.2.588 CVEs
2.2.688 CVEs
2.2.788 CVEs
2.2.888 CVEs
2.2.988 CVEs
2.3.188 CVEs
2.3.288 CVEs
2.3.388 CVEs
2.3.488 CVEs
2.3.588 CVEs
2.3.688 CVEs
2.3.788 CVEs
2.3.888 CVEs
2.4.088 CVEs
2.4.188 CVEs
2.4.288 CVEs
2.5.088 CVEs
2.5.188 CVEs
2.5.288 CVEs
2.5.388 CVEs
2.6.088 CVEs
2.6.188 CVEs
2.6.288 CVEs
2.6.388 CVEs
2.6.488 CVEs
2.6.588 CVEs
2.7.088 CVEs
2.7.188 CVEs
2.7.288 CVEs
2.7.388 CVEs
2.7.488 CVEs
2.8.088 CVEs
2.8.288 CVEs
3.0.088 CVEs
3.1.088 CVEs
3.1.188 CVEs
3.1.288 CVEs
3.1.388 CVEs
3.2.088 CVEs
3.2.188 CVEs
3.2.288 CVEs
3.2.388 CVEs
3.3.088 CVEs
3.4.088 CVEs
3.5.088 CVEs
3.4.187 CVEs
3.6.087 CVEs
3.7.087 CVEs
3.7.187 CVEs
3.7.287 CVEs
3.8.087 CVEs
3.9.087 CVEs
3.10.086 CVEs
4.0.086 CVEs
4.0.186 CVEs
4.0.286 CVEs
4.2.086 CVEs
4.1.085 CVEs
4.3.085 CVEs
4.4.084 CVEs
4.5.083 CVEs
5.0.079 CVEs
5.1.079 CVEs
5.1.179 CVEs
5.2.079 CVEs
5.2.178 CVEs
5.2.277 CVEs
5.2.376 CVEs
5.2.475 CVEs
5.2.574 CVEs
5.2.673 CVEs
5.2.772 CVEs
5.3.072 CVEs
5.2.871 CVEs
5.3.171 CVEs
5.3.271 CVEs
5.3.370 CVEs
5.4.070 CVEs
5.0.0-alpha.169 CVEs
6.0.069 CVEs
6.1.069 CVEs
6.2.069 CVEs
6.2.168 CVEs
6.2.267 CVEs
6.3.067 CVEs
6.3.166 CVEs
6.4.066 CVEs
7.0.064 CVEs
7.1.064 CVEs
7.2.064 CVEs
8.2.264 CVEs
8.2.364 CVEs
8.2.464 CVEs
8.2.564 CVEs
8.3.064 CVEs
7.3.063 CVEs
7.4.063 CVEs
8.0.063 CVEs
8.0.163 CVEs
8.0.263 CVEs
8.1.063 CVEs
8.2.063 CVEs
8.2.163 CVEs
8.4.063 CVEs
8.5.062 CVEs
8.6.061 CVEs
8.6.160 CVEs
8.6.259 CVEs
8.6.1058 CVEs
8.6.1158 CVEs
8.6.1258 CVEs
8.6.1358 CVEs
8.6.358 CVEs
8.6.458 CVEs
8.6.558 CVEs
8.6.658 CVEs
8.6.758 CVEs
8.6.858 CVEs
8.6.958 CVEs
8.6.1457 CVEs
8.6.1556 CVEs
8.6.1655 CVEs
9.0.055 CVEs
8.6.1754 CVEs
9.1.054 CVEs
8.6.1853 CVEs
9.1.153 CVEs
9.2.053 CVEs
9.3.053 CVEs
8.6.1952 CVEs
9.3.152 CVEs
9.4.052 CVEs
8.6.2051 CVEs
9.4.151 CVEs
8.6.2150 CVEs
8.6.2249 CVEs
8.6.2348 CVEs
8.6.2448 CVEs
8.6.2547 CVEs
8.6.2646 CVEs
8.6.2746 CVEs
8.6.2846 CVEs
8.6.2946 CVEs
8.6.3046 CVEs
8.6.3146 CVEs
8.6.3246 CVEs
8.6.3346 CVEs
8.6.3446 CVEs
8.6.3546 CVEs
8.6.3646 CVEs
8.6.3746 CVEs
8.6.3845 CVEs
9.5.045 CVEs
9.5.145 CVEs
8.6.3944 CVEs
8.6.4044 CVEs
8.6.4143 CVEs
8.6.4242 CVEs
8.6.4341 CVEs
8.6.4440 CVEs
8.6.4539 CVEs
8.6.4639 CVEs
8.6.4738 CVEs
8.6.4837 CVEs
8.6.4936 CVEs
8.6.5035 CVEs
8.6.5134 CVEs
8.6.5233 CVEs
8.6.5332 CVEs
8.6.5431 CVEs
8.6.5530 CVEs
8.6.5629 CVEs
8.6.5728 CVEs
8.6.5827 CVEs
8.6.5926 CVEs
8.6.6025 CVEs
8.6.6124 CVEs
8.6.6224 CVEs
8.6.6323 CVEs
9.6.023 CVEs
9.6.123 CVEs
8.6.6422 CVEs
9.5.2-alpha.122 CVEs
9.5.2-alpha.1022 CVEs
9.5.2-alpha.1122 CVEs
9.5.2-alpha.1222 CVEs
9.5.2-alpha.1322 CVEs
9.5.2-alpha.1422 CVEs
9.5.2-alpha.222 CVEs
9.5.2-alpha.322 CVEs
9.5.2-alpha.422 CVEs
9.5.2-alpha.522 CVEs
9.5.2-alpha.622 CVEs
9.5.2-alpha.722 CVEs
9.5.2-alpha.822 CVEs
9.5.2-alpha.922 CVEs
9.6.0-alpha.122 CVEs
9.6.0-alpha.1022 CVEs
9.6.0-alpha.1122 CVEs
9.6.0-alpha.222 CVEs
9.6.0-alpha.322 CVEs
9.6.0-alpha.422 CVEs
9.6.0-alpha.522 CVEs
9.6.0-alpha.622 CVEs
9.6.0-alpha.722 CVEs
9.6.0-alpha.822 CVEs
9.6.0-alpha.922 CVEs
8.6.6521 CVEs
9.6.0-alpha.1221 CVEs
8.6.6620 CVEs
9.6.0-alpha.1320 CVEs
9.6.0-alpha.1420 CVEs
8.6.6719 CVEs
9.6.0-alpha.1519 CVEs
9.6.0-alpha.1619 CVEs
8.6.6818 CVEs
9.6.0-alpha.1718 CVEs
9.6.0-alpha.1818 CVEs
8.6.6917 CVEs
9.6.0-alpha.1917 CVEs
8.6.7016 CVEs
9.6.0-alpha.2016 CVEs
8.6.7115 CVEs
8.6.7215 CVEs
9.6.0-alpha.2115 CVEs
9.6.0-alpha.2215 CVEs
9.6.0-alpha.2315 CVEs
9.7.015 CVEs
4.5.214 CVEs
8.6.7314 CVEs
9.6.0-alpha.2414 CVEs
9.6.0-alpha.2514 CVEs
9.6.0-alpha.2614 CVEs
9.6.0-alpha.2714 CVEs
9.8.014 CVEs
8.6.7413 CVEs
9.6.0-alpha.2813 CVEs
9.9.013 CVEs
4.10.012 CVEs
4.10.112 CVEs
4.10.212 CVEs
8.6.7512 CVEs
9.6.0-alpha.2912 CVEs
9.6.0-alpha.3012 CVEs
9.6.0-alpha.3112 CVEs
9.6.0-alpha.3212 CVEs
9.6.0-alpha.3312 CVEs
9.6.0-alpha.3412 CVEs
9.9.1-alpha.112 CVEs
4.10.311 CVEs
8.6.7611 CVEs
9.6.0-alpha.3511 CVEs
9.6.0-alpha.3611 CVEs
9.6.0-alpha.3711 CVEs
9.6.0-alpha.3811 CVEs
9.6.0-alpha.3911 CVEs
9.9.1-alpha.211 CVEs
4.10.410 CVEs
4.10.510 CVEs
4.10.610 CVEs
8.6.7710 CVEs
9.6.0-alpha.4010 CVEs
9.9.1-alpha.310 CVEs
4.10.79 CVEs
4.10.89 CVEs
4.10.99 CVEs
8.6.789 CVEs
9.6.0-alpha.419 CVEs
9.9.1-alpha.49 CVEs
4.10.108 CVEs
4.10.118 CVEs
8.6.798 CVEs
9.6.0-alpha.428 CVEs
9.7.0-alpha.18 CVEs
9.7.0-alpha.28 CVEs
9.7.0-alpha.38 CVEs
9.7.0-alpha.48 CVEs
9.7.0-alpha.58 CVEs
9.7.0-alpha.68 CVEs
9.9.1-alpha.58 CVEs
4.10.127 CVEs
8.6.807 CVEs
9.6.0-alpha.437 CVEs
9.7.0-alpha.77 CVEs
9.9.1-alpha.107 CVEs
9.9.1-alpha.67 CVEs
9.9.1-alpha.77 CVEs
9.9.1-alpha.87 CVEs
9.9.1-alpha.97 CVEs
4.10.136 CVEs
8.6.816 CVEs
9.5.0-alpha.16 CVEs
9.5.0-alpha.26 CVEs
9.6.0-alpha.446 CVEs
9.7.0-alpha.86 CVEs
9.9.1-alpha.116 CVEs
4.10.145 CVEs
8.6.825 CVEs
9.5.0-alpha.35 CVEs
9.6.0-alpha.455 CVEs
9.6.0-alpha.465 CVEs
9.6.0-alpha.475 CVEs
9.7.0-alpha.95 CVEs
9.9.1-alpha.125 CVEs
4.10.154 CVEs
6.5.0-alpha.14 CVEs
6.5.0-alpha.24 CVEs
6.5.0-beta.14 CVEs
8.6.834 CVEs
9.10.0-alpha.14 CVEs
9.5.0-alpha.44 CVEs
9.5.0-alpha.54 CVEs
9.6.0-alpha.484 CVEs
9.6.0-alpha.494 CVEs
9.6.0-alpha.504 CVEs
9.6.0-alpha.514 CVEs
9.7.0-alpha.104 CVEs
9.9.1-alpha.134 CVEs
4.10.163 CVEs
5.4.13 CVEs
5.4.23 CVEs
5.4.33 CVEs
5.5.03 CVEs
5.5.13 CVEs
6.5.03 CVEs
6.5.13 CVEs
6.5.23 CVEs
6.5.33 CVEs
6.5.43 CVEs
7.5.03 CVEs
7.5.13 CVEs
8.6.843 CVEs
9.10.0-alpha.23 CVEs
9.10.0-alpha.33 CVEs
9.5.0-alpha.63 CVEs
9.5.0-alpha.73 CVEs
9.6.0-alpha.523 CVEs
9.7.0-alpha.113 CVEs
4.10.172 CVEs
5.5.22 CVEs
5.5.32 CVEs
5.5.42 CVEs
6.5.52 CVEs
6.5.62 CVEs
7.0.0-alpha.12 CVEs
7.0.0-alpha.102 CVEs
7.0.0-alpha.112 CVEs
7.0.0-alpha.122 CVEs
7.0.0-alpha.132 CVEs
7.0.0-alpha.142 CVEs
7.0.0-alpha.152 CVEs
7.0.0-alpha.162 CVEs
7.0.0-alpha.172 CVEs
7.0.0-alpha.182 CVEs
7.0.0-alpha.192 CVEs
7.0.0-alpha.22 CVEs
7.0.0-alpha.32 CVEs
7.0.0-alpha.42 CVEs
7.0.0-alpha.52 CVEs
7.0.0-alpha.62 CVEs
7.0.0-alpha.72 CVEs
7.0.0-alpha.82 CVEs
7.0.0-alpha.92 CVEs
7.5.22 CVEs
8.6.852 CVEs
9.10.0-alpha.42 CVEs
9.5.0-alpha.82 CVEs
9.6.0-alpha.532 CVEs
9.7.0-alpha.122 CVEs
9.7.0-alpha.132 CVEs
< 4.0.111 CVE
< 4.10.101 CVE
< 4.10.121 CVE
< 4.10.131 CVE
< 4.10.141 CVE
< 4.10.151 CVE
< 4.10.161 CVE
< 4.10.171 CVE
< 4.10.181 CVE
< 4.10.201 CVE
< 5.4.41 CVE
< 5.5.21 CVE
< 6.5.01 CVE
< 6.5.51 CVE
< 6.5.71 CVE
< 6.5.91 CVE
< 7.5.21 CVE
< 8.6.11 CVE
< 8.6.101 CVE
< 8.6.111 CVE
< 8.6.121 CVE
< 8.6.131 CVE
< 8.6.141 CVE
< 8.6.151 CVE
< 8.6.161 CVE
< 8.6.171 CVE
< 8.6.181 CVE
< 8.6.191 CVE
< 8.6.21 CVE
< 8.6.201 CVE
< 8.6.211 CVE
< 8.6.221 CVE
< 8.6.231 CVE
< 8.6.251 CVE
< 8.6.261 CVE
< 8.6.281 CVE
< 8.6.291 CVE
< 8.6.31 CVE
< 8.6.301 CVE
< 8.6.311 CVE
< 8.6.321 CVE
< 8.6.331 CVE
< 8.6.341 CVE
< 8.6.351 CVE
< 8.6.361 CVE
< 8.6.371 CVE
< 8.6.381 CVE
< 8.6.41 CVE
< 8.6.401 CVE
< 8.6.411 CVE
< 8.6.421 CVE
< 8.6.431 CVE
< 8.6.441 CVE
< 8.6.451 CVE
< 8.6.471 CVE
< 8.6.481 CVE
< 8.6.491 CVE
< 8.6.51 CVE
< 8.6.501 CVE
< 8.6.511 CVE
< 8.6.521 CVE
< 8.6.531 CVE
< 8.6.541 CVE
< 8.6.551 CVE
< 8.6.561 CVE
< 8.6.571 CVE
< 8.6.581 CVE
< 8.6.591 CVE
< 8.6.61 CVE
< 8.6.601 CVE
< 8.6.611 CVE
< 8.6.631 CVE
< 8.6.641 CVE
< 8.6.651 CVE
< 8.6.661 CVE
< 8.6.671 CVE
< 8.6.681 CVE
< 8.6.691 CVE
< 8.6.71 CVE
< 8.6.701 CVE
< 8.6.711 CVE
< 8.6.731 CVE
< 8.6.741 CVE
< 8.6.761 CVE
< 8.6.771 CVE
< 8.6.781 CVE
< 8.6.791 CVE
< 8.6.81 CVE
< 8.6.801 CVE
< 8.6.811 CVE
< 8.6.821 CVE
< 8.6.831 CVE
< 8.6.91 CVE
< 9.4.1-alpha.31 CVE
< 9.5.0-alpha.111 CVE
< 9.5.0-alpha.31 CVE
< 9.5.0-alpha.41 CVE
< 9.5.0-alpha.61 CVE
< 9.5.0-alpha.81 CVE
< 9.5.0-alpha.91 CVE
>= 1.0.0, < 5.5.51 CVE
>= 1.0.0, < 5.5.61 CVE
>= 4.2.0, < 7.5.41 CVE
>= 5.0.0, < 5.2.11 CVE
>= 5.0.0, < 5.2.21 CVE
>= 5.0.0, < 5.2.41 CVE
>= 5.0.0, < 5.2.51 CVE
>= 5.0.0, < 5.2.61 CVE
>= 5.0.0, < 5.2.71 CVE
>= 5.0.0, < 5.2.81 CVE
>= 5.0.0, < 5.3.11 CVE
>= 5.0.0, < 5.3.31 CVE
>= 5.3.0, < 7.5.31 CVE
>= 6.0.0, < 6.1.11 CVE
>= 6.0.0, < 6.2.11 CVE
>= 6.0.0, < 6.2.21 CVE
>= 6.0.0, < 6.3.11 CVE
>= 7.0.0-alpha.1, < 7.0.0-alpha.201 CVE
>= 7.0.0-alpha.1, < 7.0.0-alpha.291 CVE
>= 7.0.0, < 7.1.01 CVE
>= 7.0.0, < 7.3.01 CVE
>= 7.0.0, < 8.6.751 CVE
>= 8.0.0 ,< 8.0.21 CVE
>= 8.0.0, < 8.2.21 CVE
>= 8.0.0, <= 8.4.0-alpha.11 CVE
>= 8.0.2, < 8.6.391 CVE
>= 9.0.0 < 9.5.0-alpha.141 CVE
>= 9.0.0 < 9.5.1-alpha.11 CVE
>= 9.0.0 < 9.5.1-alpha.21 CVE
>= 9.0.0 < 9.5.2-alpha.11 CVE
>= 9.0.0 < 9.5.2-alpha.101 CVE
>= 9.0.0 < 9.5.2-alpha.121 CVE
>= 9.0.0 < 9.5.2-alpha.131 CVE
>= 9.0.0 < 9.5.2-alpha.21 CVE
>= 9.0.0 < 9.5.2-alpha.31 CVE
>= 9.0.0 < 9.5.2-alpha.41 CVE
>= 9.0.0 < 9.5.2-alpha.51 CVE
>= 9.0.0 < 9.5.2-alpha.61 CVE
>= 9.0.0 < 9.5.2-alpha.71 CVE
>= 9.0.0 < 9.5.2-alpha.81 CVE
>= 9.0.0 < 9.5.2-alpha.91 CVE
>= 9.0.0 < 9.6.0-alpha.101 CVE
>= 9.0.0 < 9.6.0-alpha.111 CVE
>= 9.0.0 < 9.6.0-alpha.141 CVE
>= 9.0.0 < 9.6.0-alpha.21 CVE
>= 9.0.0 < 9.6.0-alpha.31 CVE
>= 9.0.0 < 9.6.0-alpha.41 CVE
>= 9.0.0 < 9.6.0-alpha.51 CVE
>= 9.0.0 < 9.6.0-alpha.61 CVE
>= 9.0.0 < 9.6.0-alpha.71 CVE
>= 9.0.0 < 9.6.0-alpha.81 CVE
>= 9.0.0 < 9.6.0-alpha.91 CVE
>= 9.0.0-alpha.1, < 9.9.1-alpha.111 CVE
>= 9.0.0-alpha.1, < 9.9.1-alpha.121 CVE
>= 9.0.0-alpha.1, < 9.9.1-alpha.131 CVE
>= 9.0.0, < 9.1.0-alpha.31 CVE
>= 9.0.0, < 9.1.1-alpha.11 CVE
>= 9.0.0, < 9.3.1-alpha.41 CVE
>= 9.0.0, < 9.6.0-alpha.121 CVE
>= 9.0.0, < 9.6.0-alpha.131 CVE
>= 9.0.0, < 9.6.0-alpha.151 CVE
>= 9.0.0, < 9.6.0-alpha.171 CVE
>= 9.0.0, < 9.6.0-alpha.191 CVE
>= 9.0.0, < 9.6.0-alpha.201 CVE
>= 9.0.0, < 9.6.0-alpha.211 CVE
>= 9.0.0, < 9.6.0-alpha.241 CVE
>= 9.0.0, < 9.6.0-alpha.281 CVE
>= 9.0.0, < 9.6.0-alpha.291 CVE
>= 9.0.0, < 9.6.0-alpha.351 CVE
>= 9.0.0, < 9.6.0-alpha.401 CVE
>= 9.0.0, < 9.6.0-alpha.411 CVE
>= 9.0.0, < 9.6.0-alpha.421 CVE
>= 9.0.0, < 9.6.0-alpha.431 CVE
>= 9.0.0, < 9.6.0-alpha.441 CVE
>= 9.0.0, < 9.6.0-alpha.451 CVE
>= 9.0.0, < 9.6.0-alpha.481 CVE
>= 9.0.0, < 9.6.0-alpha.521 CVE
>= 9.0.0, < 9.6.0-alpha.531 CVE
>= 9.0.0, < 9.6.0-alpha.541 CVE
>= 9.0.0, < 9.6.0-alpha.551 CVE
>= 9.0.0, < 9.7.0-alpha.101 CVE
>= 9.0.0, < 9.7.0-alpha.111 CVE
>= 9.0.0, < 9.7.0-alpha.121 CVE
>= 9.0.0, < 9.7.0-alpha.141 CVE
>= 9.0.0, < 9.7.0-alpha.181 CVE
>= 9.0.0, < 9.7.0-alpha.71 CVE
>= 9.0.0, < 9.7.0-alpha.81 CVE
>= 9.0.0, < 9.7.0-alpha.91 CVE
>= 9.0.0, < 9.7.1-alpha.11 CVE
>= 9.0.0, < 9.7.1-alpha.41 CVE
>= 9.0.0, < 9.8.0-alpha.61 CVE
>= 9.0.0, < 9.8.0-alpha.71 CVE
>= 9.0.0, < 9.9.0-alpha.21 CVE
>= 9.0.0, < 9.9.1-alpha.11 CVE
>= 9.0.0, < 9.9.1-alpha.21 CVE
>= 9.0.0, < 9.9.1-alpha.41 CVE
>= 9.0.0, < 9.9.1-alpha.61 CVE
>=5.0.0, < 5.2.31 CVE
4.0.101 CVE
4.0.31 CVE
4.0.41 CVE
4.0.61 CVE
4.0.71 CVE
4.0.81 CVE
4.0.91 CVE
4.10.181 CVE
4.10.191 CVE
5.5.51 CVE
6.5.71 CVE
6.5.81 CVE
7.0.0-alpha.201 CVE
7.0.0-alpha.211 CVE
7.0.0-alpha.221 CVE
7.0.0-alpha.231 CVE
7.0.0-alpha.241 CVE
7.0.0-alpha.251 CVE
7.0.0-alpha.261 CVE
7.0.0-alpha.271 CVE
7.0.0-alpha.281 CVE
7.0.0-alpha.301 CVE
7.0.0-alpha.311 CVE
7.0.0-beta.11 CVE
7.1.0-alpha.11 CVE
7.1.0-alpha.101 CVE
7.1.0-alpha.111 CVE
7.1.0-alpha.21 CVE
7.1.0-alpha.31 CVE
7.1.0-alpha.41 CVE
7.1.0-alpha.51 CVE
7.1.0-alpha.61 CVE
7.1.0-alpha.71 CVE
7.1.0-alpha.81 CVE
7.1.0-alpha.91 CVE
7.5.31 CVE
8.3.1-alpha.11 CVE
8.4.0-alpha.11 CVE
8.5.0-alpha.11 CVE
8.5.0-alpha.21 CVE
8.5.0-alpha.31 CVE
8.5.0-alpha.41 CVE
8.6.0-alpha.11 CVE
8.6.861 CVE
9.1.0-alpha.11 CVE
9.1.0-alpha.21 CVE
9.10.0-alpha.51 CVE
9.3.1-alpha.11 CVE
9.3.1-alpha.21 CVE
9.3.1-alpha.31 CVE
9.4.1-alpha.11 CVE
9.4.1-alpha.21 CVE
9.5.0-alpha.101 CVE
9.5.0-alpha.91 CVE
9.6.0-alpha.541 CVE
9.7.0-alpha.141 CVE
9.7.0-alpha.151 CVE
9.7.0-alpha.161 CVE
9.7.0-alpha.171 CVE
9.7.1-alpha.11 CVE
9.7.1-alpha.21 CVE
9.7.1-alpha.31 CVE
9.7.1-alpha.41 CVE
9.8.0-alpha.11 CVE
9.8.0-alpha.21 CVE
9.8.0-alpha.31 CVE
9.8.0-alpha.41 CVE
9.8.0-alpha.51 CVE
9.8.0-alpha.61 CVE

Version ranges

< 4.10.02 CVEs
>= 4.10.02 CVEs
< 3.4.11 CVE
< 4.1.01 CVE
< 4.10.101 CVE
< 4.10.111 CVE
< 4.10.121 CVE
< 4.10.131 CVE
< 4.10.141 CVE
< 4.10.151 CVE
< 4.10.161 CVE
< 4.10.171 CVE
< 4.10.181 CVE
< 4.10.191 CVE

Fixed in

4.10.02 CVEs
7e1da90bb2dd543ee998a76e9a6f7426e14d200b2 CVEs
01267ae5ae4bacae630195f287b64f213f23c07a1 CVE
01fad124d459c168b53916f8037e4d3ae26964381 CVE
035b9b549ebaac78e6e1a8d7727c216447b3c51e1 CVE
041e60487ccfde96ec86d24acec4bc095955e4381 CVE
0564c8438ae888843a5478f12681ec7f392bdefc1 CVE
07478de5e9a9b8a4f508402946f958598ec2e06e1 CVE
09310a7700062ab1b7190c2036f85922bb6facf21 CVE
0aeedb29a2a38f932cfdfa12e3d41a8ebb4205f31 CVE
0b032a3f8735b8e1dab8608bcacfc5b346327e4b1 CVE

Find a version

122 CVEs

Sort

Parse Server 9.0.0 Information Disclosure via GraphQL Error Messages
CVE-2026-66009
Patch
CWE-209
Medium · CVSS 6.3
EPSS 0.3% (18th pct)2026-07-24
Parse Server 9.0.0 Information Disclosure via GraphQL Error Messages
CVE-2026-66008
Patch
CWE-209
Medium · CVSS 6.3
EPSS 0.3% (24th pct)2026-07-24
Parse Server 9.0.0 Schema Disclosure via GraphQL Variable Coercion
CVE-2026-64627
Patch
CWE-209
Medium · CVSS 6.9
EPSS 0.3% (20th pct)2026-07-21
Parse Server 9.0.0 Stored XSS via malformed Content-Type
CVE-2026-61448
Patch
CWE-434
Low · CVSS 2.1
EPSS 0.2% (16th pct)2026-07-11
Parse Server: LiveQuery discloses object data to a subscriber across an ACL read-access change
CVE-2026-57481
Patch
CWE-200
Low · CVSS 2.3
EPSS 0.4% (31th pct)2026-07-08
Parse Server: Denial of service via exponential-time processing of deeply nested query operators
CVE-2026-57480
Patch
CWE-407
High · CVSS 8.7
EPSS 0.3% (26th pct)2026-07-08
Parse Server: Stored XSS via non-standard file extension bypassing file upload extension blocklist
CVE-2026-55778
Patch
CWE-434
Low · CVSS 2.1
EPSS 0.4% (33th pct)2026-07-08
Parse Server - Arbitrary Code Execution via Malicious Version Tags
CVE-2021-47987
Patch
CWE-494
High · CVSS 7.7
EPSS 0.1% (2th pct)2026-06-25
Parse Server - Unreviewed Code Execution via Malicious Version Tags
CVE-2021-47986
Patch
CWE-494
High · CVSS 7.7
EPSS 0.1% (2th pct)2026-06-25
Parse Server: Relation `$relatedTo` query bypasses `protectedFields` and owning-object ACL
CVE-2026-53726
Patch
CWE-639
Medium · CVSS 6.9
EPSS 0.3% (20th pct)2026-06-12
Parse Server: Endpoints `/login` and `/verifyPassword` disclose MFA secrets and protected fields when `_User` get is denied
CVE-2026-53725
Patch
CWE-200
Medium · CVSS 5.9
EPSS 0.3% (17th pct)2026-06-12
Parse Server: Stored XSS via trailing-dot filename bypassing file upload extension blocklist
CVE-2026-53724
Patch
CWE-79
Low · CVSS 2.1
EPSS 0.3% (20th pct)2026-06-12
Parse Server: Server option routeAllowList is bypassable through batch sub-requests
CVE-2026-50008
Patch
CWE-863
Medium · CVSS 6.9
EPSS 0.3% (27th pct)2026-06-12
Parse Server: Pre-authentication denial of service via client version header regex backtracking
CVE-2026-47138
Patch
CWE-1333
High · CVSS 8.7
EPSS 0.6% (44th pct)2026-06-12
Parse Server: GraphQL "Did you mean" validation suggestions disclose schema to unauthenticated callers
CVE-2026-47248
Patch
CWE-209
Medium · CVSS 6.9
EPSS 0.3% (21th pct)2026-06-12
Parse Server: MFA SMS one-time password accepted twice under concurrent login
CVE-2026-43930
Patch
CWE-362
Low · CVSS 2.1
EPSS 0.2% (15th pct)2026-05-12
Parse Server's Endpoint `/sessions/me` bypasses `_Session` `protectedFields`
CVE-2026-39381
Patch
CWE-863
Medium · CVSS 5.3
EPSS 0.2% (9th pct)2026-04-07
Parse Server has a login timing side-channel reveals user existence
CVE-2026-39321
Patch
CWE-208
Medium · CVSS 6.3
EPSS 0.2% (14th pct)2026-04-07
Parse Server has a file upload Content-Type override via extension mismatch
CVE-2026-35200
Patch
CWE-436
Low · CVSS 2.1
EPSS 0.2% (6th pct)2026-04-06
Parse Server: Streaming file download bypasses afterFind file trigger authorization
CVE-2026-34784
Patch
CWE-285
High · CVSS 8.2
EPSS 0.4% (30th pct)2026-03-31
Parse Server: Auth data exposed via verify password endpoint
CVE-2026-34215
Patch
CWE-200
High · CVSS 8.2
EPSS 0.3% (23th pct)2026-03-31
Parse Server: LiveQuery protected-field guard bypass via array-like logical operator value
CVE-2026-34595
Patch
CWE-843
Medium · CVSS 5.3
EPSS 0.3% (17th pct)2026-03-31
Parse Server: Session field immutability bypass via falsy-value guard
CVE-2026-34574
Patch
CWE-697
Medium · CVSS 5.3
EPSS 0.2% (11th pct)2026-03-31
Parse Server: GraphQL complexity validator exponential fragment traversal DoS
CVE-2026-34573
Patch
CWE-407
High · CVSS 8.2
EPSS 0.5% (38th pct)2026-03-31
Parse Server: Cloud function validator bypass via prototype chain traversal
CVE-2026-34532
Patch
CWE-863
Critical · CVSS 9.1
EPSS 0.3% (20th pct)2026-03-31
Parse Server: GraphQL API endpoint ignores CORS origin restriction
CVE-2026-34373
Patch
CWE-346
Medium · CVSS 5.3
EPSS 0.2% (10th pct)2026-03-31
Parse Server: LiveQuery protected field leak via shared mutable state across concurrent subscribers
CVE-2026-34363
Patch
CWE-362
High · CVSS 8.2
EPSS 0.4% (29th pct)2026-03-31
Parse Server: MFA single-use token bypass via concurrent authData login requests
CVE-2026-34224
Patch
CWE-367
Low · CVSS 2.1
EPSS 0.3% (24th pct)2026-03-31
Parse Server: Auth data exposed via /users/me endpoint
CVE-2026-33627
Patch
CWE-200
High · CVSS 7.1
EPSS 0.4% (30th pct)2026-03-24
Parse Server: MFA recovery code single-use bypass via concurrent requests
CVE-2026-33624
Patch
CWE-367
Low · CVSS 2.1
EPSS 0.2% (7th pct)2026-03-24

Showing 30 of 122

parse-community parse-server Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other parse-community products

Frequently asked questions

References

Track parse-community parse-server vulnerabilities