Known vulnerabilities in Parse Server - page 3

Vendor: Parse Community
Software: Parse Server
Software CPE: cpe:2.3:a:parse_community:parse_server:*:*:*:*:*:*:*:*
Website: https://parseplatform.org/
Total vulnerabilities: 102
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Parse Server Parse Server is affected by 102 known vulnerabilities: 19 high, 54 medium, 29 low Critical High Medium Low

Vulnerabilities (102)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124994 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-31868		 CWE-79 Medium
No
No
 8.6.30, 9.6.0 alpha.4 06.04.2026 SB2026040761
#VU124995 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-31871		 CWE-89 High
No
No
 8.6.31, 9.6.0 alpha.5 06.04.2026 SB2026040760
#VU124996 -
CVE-2026-31872		 Medium
No
No
 8.6.32, 9.6.0 alpha.6 06.04.2026 SB2026040759
#VU124997 - Operation on a Resource after Expiration or Release
CVE-2026-31875		 CWE-672 Medium
No
No
 8.6.33, 9.6.0 alpha.7 06.04.2026 SB2026040758
#VU124998 - Observable Response Discrepancy
CVE-2026-31901		 CWE-204 Medium
No
No
 8.6.34, 9.6.0 alpha.8 06.04.2026 SB2026040757
#VU124999 - Exposure of sensitive information to an unauthorized actor
CVE-2026-32098		 CWE-200 Medium
No
No
 8.6.35, 9.6.0 alpha.9 06.04.2026 SB2026040756
#VU125000 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-32234		 CWE-89 Low
No
No
 8.6.36, 9.6.0 alpha.10 06.04.2026 SB2026040755
#VU125001 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-32242		 CWE-362 Medium
No
No
 8.6.37, 9.6.0 alpha.11 06.04.2026 SB2026040754
#VU125002 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2026-32248		 CWE-943 High
No
No
 8.6.38, 9.6.0 alpha.12 06.04.2026 SB2026040753
#VU125003 - Function Call With Incorrect Order of Arguments
CVE-2026-32269		 CWE-683 Medium
No
No
 8.6.39, 9.6.0 alpha.13 06.04.2026 SB2026040752
#VU125004 - Missing Authentication for Critical Function
CVE-2026-32594		 CWE-306 Medium
No
No
 8.6.40, 9.6.0 alpha.14 06.04.2026 SB2026040751
#VU125005 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-32728		 CWE-79 Low
No
No
 8.6.41, 9.6.0 alpha.15 06.04.2026 SB2026040750
#VU125006 - Uncontrolled Recursion
CVE-2026-33498		 CWE-674 Medium
No
No
 8.6.55, 9.6.0 alpha.44 06.04.2026 SB2026040749
#VU125007 - Uncontrolled Recursion
CVE-2026-33508		 CWE-674 Medium
No
No
 8.6.56, 9.6.0 alpha.45 06.04.2026 SB2026040748
#VU125008 - Incorrect Authorization
CVE-2026-33527		 CWE-863 Low
No
No
 8.6.57, 9.6.0 alpha.48 06.04.2026 SB2026040747
#VU125009 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-33539		 CWE-89 Low
No
No
 8.6.59, 9.6.0 alpha.53 06.04.2026 SB2026040746
#VU125010 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-33624		 CWE-367 Low
No
No
 8.6.60, 9.6.0 alpha.54 06.04.2026 SB2026040745
#VU125011 - Information Exposure Through Timing Discrepancy
CVE-2026-39321		 CWE-208 Low
No
No
 8.6.74, 9.8.0 alpha.6 06.04.2026 SB2026040744
#VU124820 - Interpretation Conflict
CVE-2026-35200		 CWE-436 Low
No
No
 8.6.73, 9.7.1 alpha.4 02.04.2026 SB2026040229
#VU124819 - Improper Authorization
CVE-2026-34784		 CWE-285 Medium
No
No
 8.6.71, 9.7.1 alpha.1 02.04.2026 SB2026040228


Showing elements 41 - 60 out of 102