Known vulnerabilities in Parse Server

Vendor: Parse Community
Software: Parse Server
Software CPE: cpe:2.3:a:parse_community:parse_server:*:*:*:*:*:*:*:*
Website: https://parseplatform.org/
Total vulnerabilities: 114
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Parse Server Parse Server is affected by 114 known vulnerabilities: 20 high, 61 medium, 33 low Critical High Medium Low

Vulnerabilities (114)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU149933 - Improper Authentication
CVE-2026-101042		 CWE-287 Low
No
No
 8.6.91, 9.10.1 alpha.10 15.09.2026 SB2026091513
#VU149932 - Exposure of sensitive information to an unauthorized actor
CVE-2026-100632		 CWE-200 Low
No
No
 8.6.89, 9.10.1 alpha.8 15.09.2026 SB2026091512
#VU149931 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2026-100631		 CWE-943 Medium
No
No
 8.6.90, 9.10.1 alpha.9 15.09.2026 SB2026091511
#VU149930 - Improper Authentication
CVE-2026-87806		 CWE-287 High
No
No
 8.6.88, 9.10.1 alpha.7 15.09.2026 SB2026091510
#VU149929 - Information Exposure Through an Error Message
CVE-2026-66008		 CWE-209 Low
No
No
 8.6.87, 9.10.0 alpha.6 15.09.2026 SB2026091509
#VU149928 - Information Exposure Through an Error Message
CVE-2026-66009		 CWE-209 Medium
No
No
 8.6.86, 9.10.0 alpha.5 15.09.2026 SB2026091508
#VU149927 - Information Exposure Through an Error Message
CVE-2026-64627		 CWE-209 Medium
No
No
 8.6.85, 9.10.0 alpha.4 15.09.2026 SB2026091507
#VU135972 - Exposure of sensitive information to an unauthorized actor
CVE-2026-57481		 CWE-200 Low
No
No
 8.6.83, 9.9.1 alpha.13 30.06.2026 SB2026063053
#VU135971 - Inefficient Algorithmic Complexity
CVE-2026-57480		 CWE-407 Medium
No
No
 8.6.82, 9.9.1 alpha.12 30.06.2026 SB2026063052
#VU135970 - Unrestricted Upload of File with Dangerous Type
CVE-2026-55778		 CWE-434 Low
No
No
 8.6.81, 9.9.1 alpha.11 30.06.2026 SB2026063051
#VU135969 - Authorization Bypass Through User-Controlled Key
CVE-2026-53726		 CWE-639 Medium
No
No
 8.6.80, 9.9.1 alpha.6 30.06.2026 SB2026063050
#VU135968 - Exposure of sensitive information to an unauthorized actor
CVE-2026-53725		 CWE-200 Low
No
No
 9.9.1 alpha.5 30.06.2026 SB2026063049
#VU135967 - Incorrect Authorization
CVE-2026-50008		 CWE-863 Medium
No
No
 9.9.1 alpha.3 30.06.2026 SB2026063048
#VU129731 - Resource exhaustion
CVE-2026-33538		 CWE-400 Medium
No
No
 8.6.58, 9.6.0 alpha.52 05.05.2026 SB2026050558
#VU129684 - Allocation of Resources Without Limits or Throttling
CVE-2026-30946		 CWE-770 Medium
No
No
 8.6.15, 9.5.2 alpha.2 05.05.2026 SB2026050557
#VU129682 - Exposure of sensitive information to an unauthorized actor
CVE-2026-33627		 CWE-200 Medium
No
No
 8.6.61, 9.6.0 alpha.55 05.05.2026 SB2026050556
#VU125034 - Incorrect Authorization
CVE-2026-39381		 CWE-863 Low
No
No
 8.6.75, 9.8.0 alpha.7 07.04.2026 SB2026040791
#VU124966 - Improper Access Control
CVE-2025-64502		 CWE-284 Medium
No
No
 8.5.0 alpha.5 06.04.2026 SB2026040789
#VU124967 - Insufficient Verification of Data Authenticity
CVE-2026-27804		 CWE-345 High
No
No
 8.6.3, 9.3.1 alpha.4 06.04.2026 SB2026040788
#VU46732 - Improper Authorization
 CWE-285 Low
No
No
 - 15.09.2020 SB2020091513


Showing elements 1 - 20 out of 114