Known vulnerabilities in parse-server

Vendor: MeetFox
Software: parse-server
Software CPE: cpe:2.3:a:jokuja:parse-server:*:*:*:*:*:npm:*:*
Website: https://profiles.wordpress.org/jokuja/
Total vulnerabilities: 21
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting parse-server parse-server is affected by 21 known vulnerabilities: 4 high, 8 medium, 9 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133287 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-53724		 CWE-79 Low
No
No
 8.6.79, 9.9.1 alpha.4 03.06.2026 SB2026060320
#VU132208 - Information Exposure Through an Error Message
CVE-2026-47248		 CWE-209 Medium
No
No
 8.6.78, 9.9.1 alpha.2 23.05.2026 SB2026052316
#VU132207 - Inefficient Regular Expression Complexity
CVE-2026-47138		 CWE-1333 Medium
No
No
 8.6.77, 9.9.1 alpha.1 23.05.2026 SB2026052315
#VU132201 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-43930		 CWE-362 Low
No
No
 8.6.76, 9.9.0 alpha.2 23.05.2026 SB2026052314
#VU132202 - Improper Access Control
CVE-2025-30168		 CWE-284 Low
No
No
 7.5.2, 8.0.2 21.03.2025 SB2025032199
#VU132200 - Improper Access Control
CVE-2024-47183		 CWE-284 Low
No
No
 6.5.9, 7.3.0 04.10.2024 SB2024100429
#VU93537 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-39309		 CWE-89 High
Available
No
 6.5.7, 7.1.0 01.07.2024 SB2024070154
#VU87659 - Improper Control of Generation of Code ('Code Injection')
 CWE-94 High
No
No
 6.5.5 20.03.2024 SB2024032037
#VU132199 - Improper Access Control
CVE-2023-32689		 CWE-284 Low
No
No
 6.2.0 30.05.2023 SB2023053080
#VU132198 - Improper input validation
CVE-2022-39231		 CWE-20 Low
No
No
 4.10.16, 5.2.7 20.09.2022 SB2022092063
#VU132197 - Improper Access Control
CVE-2022-39225		 CWE-284 Low
No
No
 4.10.15, 5.2.6 20.09.2022 SB2022092062
#VU132196 - Improper Access Control
CVE-2022-31112		 CWE-284 Medium
No
No
 4.10.13, 5.2.4 30.06.2022 SB2022063037
#VU64485 - Improper input validation
CVE-2022-31089		 CWE-20 Medium
No
No
 4.10.12, 5.2.3 18.06.2022 SB2022061802
#VU132195 - Improper input validation
CVE-2022-24901		 CWE-20 High
No
No
 4.10.10, 5.2.1 01.05.2022 SB2022050104
#VU61472 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24760		 CWE-94 High
No
No
 4.10.7 20.03.2022 SB2022032023
#VU56291 - Improper input validation
CVE-2021-39187		 CWE-20 Medium
No
No
 4.10.3 03.09.2021 SB2021090305
#VU49206 - Cleartext Storage of Sensitive Information
CVE-2020-26288		 CWE-312 Low
No
No
 4.5.0 30.12.2020 SB2020123003
#VU132203 - Improper Access Control
CVE-2020-15126		 CWE-284 Low
No
No
 4.3.0 22.07.2020 SB2020072235
#VU132204 - Improper Access Control
CVE-2020-5251		 CWE-284 Medium
No
No
 4.1.0 03.03.2020 SB2020030321
#VU132205 - Observable discrepancy
CVE-2019-1020013		 CWE-203 Medium
No
No
 3.6.0 11.07.2019 SB2019071137


Showing elements 1 - 20 out of 21