Known vulnerabilities in Parse Server - page 2

Vendor: Parse Community
Software: Parse Server
Software CPE: cpe:2.3:a:parse_community:parse_server:*:*:*:*:*:*:*:*
Website: https://parseplatform.org/
Total vulnerabilities: 102
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Parse Server Parse Server is affected by 102 known vulnerabilities: 19 high, 54 medium, 29 low Critical High Medium Low

Vulnerabilities (102)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124974 - Incorrect Authorization
CVE-2026-30854		 CWE-863 Medium
No
No
 9.5.0 alpha.10 06.04.2026 SB2026040781
#VU124975 - Missing Authorization
CVE-2026-30850		 CWE-862 Medium
No
No
 8.6.9, 9.5.0 alpha.9 06.04.2026 SB2026040780
#VU124976 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-30939		 CWE-1321 High
No
No
 8.6.13, 9.5.1 alpha.2 06.04.2026 SB2026040779
#VU124977 - Inefficient Regular Expression Complexity
CVE-2026-30925		 CWE-1333 Medium
No
No
 8.6.11, 9.5.0 alpha.14 06.04.2026 SB2026040778
#VU124978 - Improper input validation
CVE-2024-29027		 CWE-20 High
No
No
 6.5.5 06.04.2026 SB2026040777
#VU124979 - Improper Access Control
CVE-2025-53364		 CWE-284 Medium
No
No
 7.5.3, 8.2.2 06.04.2026 SB2026040776
#VU124980 - Protection Mechanism Failure
CVE-2026-30938		 CWE-693 Medium
No
No
 8.6.12, 9.5.1 alpha.1 06.04.2026 SB2026040775
#VU124981 - Missing Authorization
CVE-2026-31800		 CWE-862 High
No
No
 8.6.25, 9.5.2 alpha.12 06.04.2026 SB2026040774
#VU124982 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-31856		 CWE-89 High
No
No
 8.6.29, 9.6.0 alpha.3 06.04.2026 SB2026040773
#VU124983 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-31840		 CWE-89 High
No
No
 8.6.28, 9.6.0 alpha.2 06.04.2026 SB2026040772
#VU124984 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-31828		 CWE-90 Low
No
No
 8.6.26, 9.5.2 alpha.13 06.04.2026 SB2026040771
#VU124985 - Improper Authentication
CVE-2026-30967		 CWE-287 Medium
No
No
 8.6.22, 9.5.2 alpha.9 06.04.2026 SB2026040770
#VU124986 - Incorrect Authorization
CVE-2026-30965		 CWE-863 High
No
No
 8.6.21, 9.5.2 alpha.8 06.04.2026 SB2026040769
#VU124987 - Improper Access Control
CVE-2026-30966		 CWE-284 High
No
No
 8.6.20, 9.5.2 alpha.7 06.04.2026 SB2026040768
#VU124988 - Improper Control of Interaction Frequency
CVE-2026-30972		 CWE-799 Medium
No
No
 8.6.23, 9.5.2 alpha.10 06.04.2026 SB2026040767
#VU124989 - Incorrect Authorization
CVE-2026-30947		 CWE-863 Medium
No
No
 8.6.16, 9.5.2 alpha.3 06.04.2026 SB2026040766
#VU124990 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-30948		 CWE-79 Low
No
No
 8.6.17, 9.5.2 alpha.4 06.04.2026 SB2026040765
#VU124991 - Improper Authentication
CVE-2026-30949		 CWE-287 Medium
No
No
 8.6.18, 9.5.2 alpha.5 06.04.2026 SB2026040764
#VU124992 - Improper Access Control
CVE-2026-30962		 CWE-284 Low
No
No
 8.6.19, 9.5.2 alpha.6 06.04.2026 SB2026040763
#VU124993 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2026-30941		 CWE-943 Medium
No
No
 8.6.14, 9.5.2 alpha.1 06.04.2026 SB2026040762


Showing elements 21 - 40 out of 102