Parse Server role escalation and CLP bypass via direct `_Join` table write

Parse Server literalizeRegexPart SQL Injection

Parse Server: Account takeover via operator injection in authentication data identifier

Parse Server has a SQL Injection via dot-notation sub-key name in `Increment` operation on PostgreSQL

Parse Server has a SQL injection via `Increment` operation on nested object field in PostgreSQL

Parse Server has a SQL injection via dot-notation field name in PostgreSQL

Parse Server: JWT audience validation bypass in Google, Apple, and Facebook authentication adapters

Parse Server GitHub CI workflow vulnerable to RCE through Improper Privilege Management

ZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability

Parse Server: Cloud function validator bypass via prototype chain traversal

Parse Server: Auth provider validation bypass on login via partial authData

Parse Server: Classes `_GraphQLConfig` and `_Audience` master key bypass via generic class routes

Parse Server session token exfiltration via `redirectClassNameForKey` query parameter

Parse Server: Account takeover via JWT algorithm confusion in Google auth adapter

Parse Server crash and RCE via invalid Cloud Function or Cloud Job name