Robuta

https://advisories.gitlab.com/npm/parse-server/CVE-2026-33163/ Parse Server leaks protected fields via LiveQuery afterEvent trigger | GitLab Advisory Database... CVE-2026-33163 Parse Server leaks protected fields via LiveQuery afterEvent trigger: When a Parse.Cloud.afterLiveQueryEvent trigger is registered for a class,... parse server https://advisories.gitlab.com/npm/parse-server/CVE-2026-30938/ Parse Server has denylist `requestKeywordDenylist` keyword scan bypass through nested object... CVE-2026-30938 Parse Server has denylist `requestKeywordDenylist` keyword scan bypass through nested object placement: The requestKeywordDenylist security... parse server https://advisories.gitlab.com/npm/parse-server/CVE-2024-27298/ ZDI-CAN-19105: Parse Server literalizeRegexPart SQL Injection | GitLab Advisory Database (GLAD) CVE-2024-27298 ZDI-CAN-19105: Parse Server literalizeRegexPart SQL Injection: Impact This vulnerability allows SQL injection when Parse Server is configured to... parse server https://freiesland.com/ Parse Server Example parse serverexample https://advisories.gitlab.com/pkg/npm/parse-server/CVE-2025-68115/ https://advisories.gitlab.com/npm/parse-server/CVE-2025-68115/ parse serverhttpsadvisoriesgitlabnpm https://advisories.gitlab.com/pkg/npm/parse-server/GHSA-x4qj-2f4q-r4rx/ https://advisories.gitlab.com/npm/parse-server/GHSA-x4qj-2f4q-r4rx/ parse serverhttpsadvisoriesgitlabnpm https://advisories.gitlab.com/npm/parse-server/CVE-2026-32594/ Parse Server's GraphQL WebSocket endpoint bypasses security middleware | GitLab Advisory Database... CVE-2026-32594 Parse Server's GraphQL WebSocket endpoint bypasses security middleware: Any Parse Server deployment that uses the GraphQL API is affected. The... parse server https://advisories.gitlab.com/npm/parse-server/CVE-2026-30965/ Parse Server vulnerable to session token exfiltration via `redirectClassNameForKey` query parameter... CVE-2026-30965 Parse Server vulnerable to session token exfiltration via `redirectClassNameForKey` query parameter: A vulnerability in Parse Server's query... parse serversession tokenvulnerable https://advisories.gitlab.com/pkg/npm/parse-server/CVE-2021-39187/ https://advisories.gitlab.com/npm/parse-server/CVE-2021-39187/ parse serverhttpsadvisoriesgitlabnpm https://advisories.gitlab.com/pkg/npm/parse-server/GMS-2023-196/ https://advisories.gitlab.com/npm/parse-server/GMS-2023-196/ parse serverhttpsadvisoriesgitlabnpm https://advisories.gitlab.com/npm/parse-server/CVE-2024-39309/ ZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability |... CVE-2024-39309 ZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability: This vulnerability allows SQL injection when... parse serversql injectionauthentication bypasszdi https://advisories.gitlab.com/pkg/npm/parse-server/CVE-2023-36475/ https://advisories.gitlab.com/npm/parse-server/CVE-2023-36475/ parse serverhttpsadvisoriesgitlabnpm https://advisories.gitlab.com/npm/parse-server/CVE-2026-30228/ parse-server's file creation and deletion bypasses `readOnlyMasterKey` write restriction | GitLab... CVE-2026-30228 parse-server's file creation and deletion bypasses `readOnlyMasterKey` write restriction: The readOnlyMasterKey can be used to create and delete... parse serverfile creation https://britishgeologicalsurvey.github.io/open-source/bgs-contribution-to-parse-server-open-source-platform/ BGS contribution to Parse Server open-source platform - British Geological Survey Dec 10, 2019 - A number of BGS projects are using the open source Parse Server platform. Previously an MBaaS (mobile backend as a service) purchased by Facebook in 2013,... open source platformparse serverbgscontribution https://blog.bitnami.com/2017/02/security-release-parse-server-231-1.html Bitnami Blog: Security Release: Parse Server 2.3.1-1 Bitnami has released Parse Server version 2.3.1-1 for containers, installers and virtual machines to implement authentication when connectin... blog securityparse serverbitnamirelease https://advisories.gitlab.com/npm/parse-server/CVE-2026-33323/ Parse Server email verification resend page leaks user existence | GitLab Advisory Database (GLAD) CVE-2026-33323 Parse Server email verification resend page leaks user existence: The Pages route and legacy PublicAPI route for resending email verification...