PS
Product
Parse Server
103
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 19High 41Medium 37Low 6
Watch
Add Parse Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-39321 | 3.7 | Apr 7 | Parse Server has a login timing side-channel reveals user existence Affected: before 8.6.74; 9.0.0 before 9.8.0; 9.8.0; 9.8.0; 9.8.0; 9.8.0; +1 more |
| CVE-2026-30848 | 3.7 | Mar 7 | Parse Server: `PagesRouter` path traversal allows reading files outside configured pages directory Affected: before 8.6.8; 9.0.0 before 9.5.0; 9.5.0; 9.5.0; 9.5.0; 9.5.0; +3 more |
| CVE-2022-39231 | 3.7 | Sep 23 | Parse Server subject to Improper Authentication allowing Auth adapter app ID validation to be circumvented Affected: before 4.10.16; 5.0.0 before 5.2.7 |
| CVE-2026-32943 | 3.1 | Mar 18 | Parse Server has a password reset token single-use bypass via concurrent requests Affected: before 8.6.48; 9.0.0 before 9.6.0; 9.6.0; 9.6.0; 9.6.0; 9.6.0; +23 more |
| CVE-2022-39225 | 3.1 | Sep 23 | Parse Server subject to Incorrect Resource Transfer Between Spheres Affected: before 4.10.15; 5.0.0 before 5.2.6 |
| CVE-2026-33624 | 2.7 | Mar 24 | Parse Server: MFA recovery code single-use bypass via concurrent requests Affected: before 8.6.60; 9.0.0 before 9.6.0; 9.6.0; 9.6.0; 9.6.0; 9.6.0; +34 more |
Showing 6