Known vulnerabilities in Parse Server - page 2

Vendor: Parse Community
Software: Parse Server
Software CPE: cpe:2.3:a:parse_community:parse_server:*:*:*:*:*:*:*:*
Website: https://parseplatform.org/
Total vulnerabilities: 114
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Parse Server Parse Server is affected by 114 known vulnerabilities: 20 high, 61 medium, 33 low Critical High Medium Low

Vulnerabilities (114)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124968 - Incorrect Authorization
CVE-2026-29182		 CWE-863 Low
No
No
 8.6.4, 9.4.1 alpha.3 06.04.2026 SB2026040787
#VU124969 - Incorrect Authorization
CVE-2026-30228		 CWE-863 Low
No
No
 8.6.5, 9.5.0 alpha.3 06.04.2026 SB2026040786
#VU124970 - Incorrect Authorization
CVE-2026-30229		 CWE-863 Low
No
No
 8.6.6, 9.5.0 alpha.4 06.04.2026 SB2026040785
#VU124971 - Information Exposure Through an Error Message
CVE-2026-30835		 CWE-209 Medium
No
No
 8.6.7, 9.5.0 alpha.6 06.04.2026 SB2026040784
#VU124972 - Improper Authentication
CVE-2026-30863		 CWE-287 High
No
No
 8.6.10, 9.5.0 alpha.11 06.04.2026 SB2026040783
#VU124973 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-30848		 CWE-22 Medium
No
No
 8.6.8, 9.5.0 alpha.8 06.04.2026 SB2026040782
#VU124974 - Incorrect Authorization
CVE-2026-30854		 CWE-863 Medium
No
No
 9.5.0 alpha.10 06.04.2026 SB2026040781
#VU124975 - Missing Authorization
CVE-2026-30850		 CWE-862 Medium
No
No
 8.6.9, 9.5.0 alpha.9 06.04.2026 SB2026040780
#VU124976 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-30939		 CWE-1321 High
No
No
 8.6.13, 9.5.1 alpha.2 06.04.2026 SB2026040779
#VU124977 - Inefficient Regular Expression Complexity
CVE-2026-30925		 CWE-1333 Medium
No
No
 8.6.11, 9.5.0 alpha.14 06.04.2026 SB2026040778
#VU124978 - Improper input validation
CVE-2024-29027		 CWE-20 High
No
No
 6.5.5 06.04.2026 SB2026040777
#VU124979 - Improper Access Control
CVE-2025-53364		 CWE-284 Medium
No
No
 7.5.3, 8.2.2 06.04.2026 SB2026040776
#VU124980 - Protection Mechanism Failure
CVE-2026-30938		 CWE-693 Medium
No
No
 8.6.12, 9.5.1 alpha.1 06.04.2026 SB2026040775
#VU124981 - Missing Authorization
CVE-2026-31800		 CWE-862 High
No
No
 8.6.25, 9.5.2 alpha.12 06.04.2026 SB2026040774
#VU124982 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-31856		 CWE-89 High
No
No
 8.6.29, 9.6.0 alpha.3 06.04.2026 SB2026040773
#VU124983 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-31840		 CWE-89 High
No
No
 8.6.28, 9.6.0 alpha.2 06.04.2026 SB2026040772
#VU124984 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-31828		 CWE-90 Low
No
No
 8.6.26, 9.5.2 alpha.13 06.04.2026 SB2026040771
#VU124985 - Improper Authentication
CVE-2026-30967		 CWE-287 Medium
No
No
 8.6.22, 9.5.2 alpha.9 06.04.2026 SB2026040770
#VU124986 - Incorrect Authorization
CVE-2026-30965		 CWE-863 High
No
No
 8.6.21, 9.5.2 alpha.8 06.04.2026 SB2026040769
#VU124987 - Improper Access Control
CVE-2026-30966		 CWE-284 High
No
No
 8.6.20, 9.5.2 alpha.7 06.04.2026 SB2026040768


Showing elements 21 - 40 out of 114