VendorsParse Platformparse-server9.7.0
Vulnerabilities

Parse Platform Parseplatform Parse-server 9.7.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2026-34532
Parse Server: Cloud function validator bypass via prototype chain traversal
Published 2026-03-31 · Analyzed
9.1EPSS 0.005
CVE-2026-34373
Parse Server: GraphQL API endpoint ignores CORS origin restriction
Published 2026-03-31 · Analyzed
8.8EPSS 0.002
CVE-2026-34573
Parse Server: GraphQL complexity validator exponential fragment traversal DoS
Published 2026-03-31 · Analyzed
8.2EPSS 0.009
CVE-2026-34215
Parse Server: Auth data exposed via verify password endpoint
Published 2026-03-31 · Modified
8.2EPSS 0.005
CVE-2026-34363
Parse Server: LiveQuery protected field leak via shared mutable state across concurrent subscribers
Published 2026-03-31 · Analyzed
8.2EPSS 0.004
CVE-2026-34574
Parse Server: Session field immutability bypass via falsy-value guard
Published 2026-03-31 · Analyzed
5.4EPSS 0.003
CVE-2026-34595
Parse Server: LiveQuery protected-field guard bypass via array-like logical operator value
Published 2026-03-31 · Analyzed
5.3EPSS 0.004
CVE-2026-34224
Parse Server: MFA single-use token bypass via concurrent authData login requests
Published 2026-03-31 · Modified
4.4EPSS 0.003