Known vulnerabilities in Parse Server - page 4

Vendor: Parse Community
Software: Parse Server
Software CPE: cpe:2.3:a:parse_community:parse_server:*:*:*:*:*:*:*:*
Website: https://parseplatform.org/
Total vulnerabilities: 102
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Parse Server Parse Server is affected by 102 known vulnerabilities: 19 high, 54 medium, 29 low Critical High Medium Low

Vulnerabilities (102)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124685 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-34224		 CWE-367 Low
No
No
 8.6.64, 9.7.0 alpha.8 30.03.2026 SB2026033041
#VU124684 - Origin Validation Error
CVE-2026-34373		 CWE-346 Medium
No
No
 8.6.66, 9.7.0 alpha.10 30.03.2026 SB2026033040
#VU124679 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-34363		 CWE-362 Medium
No
No
 8.6.65, 9.7.0 alpha.9 30.03.2026 SB2026033039
#VU124676 - Incorrect Authorization
CVE-2026-34532		 CWE-863 High
No
No
 8.6.67, 9.7.0 alpha.11 30.03.2026 SB2026033038
#VU124675 - Inefficient Algorithmic Complexity
CVE-2026-34573		 CWE-407 Medium
No
No
 8.6.68, 9.7.0 alpha.12 30.03.2026 SB2026033037
#VU124674 - Incorrect Comparison
CVE-2026-34574		 CWE-697 Medium
No
No
 8.6.69, 9.7.0 alpha.14 30.03.2026 SB2026033036
#VU124673 - Exposure of sensitive information to an unauthorized actor
CVE-2026-34215		 CWE-200 Low
No
No
 8.6.63, 9.7.0 alpha.7 30.03.2026 SB2026033035
#VU124672 - Type confusion
CVE-2026-34595		 CWE-843 Medium
No
No
 8.6.70, 9.7.0 alpha.16 30.03.2026 SB2026033034
#VU124170 - Uncontrolled Recursion
CVE-2026-32944		 CWE-674 Medium
No
No
 8.6.45, 9.6.0 alpha.21 20.03.2026 SB2026032047
#VU124169 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-32943		 CWE-367 Low
No
No
 8.6.48, 9.6.0 alpha.28 20.03.2026 SB2026032046
#VU124168 - Improper input validation
CVE-2026-32770		 CWE-20 Medium
No
No
 8.6.43, 9.6.0 alpha.19 20.03.2026 SB2026032045
#VU124167 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-32886		 CWE-1321 Medium
No
No
 8.6.47, 9.6.0 alpha.24 20.03.2026 SB2026032044
#VU124166 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-32742		 CWE-915 Medium
No
No
 8.6.42, 9.6.0 alpha.17 20.03.2026 SB2026032043
#VU124165 - Improper Authentication
CVE-2026-33042		 CWE-287 Medium
No
No
 8.6.49, 9.6.0 alpha.29 20.03.2026 SB2026032041
#VU124164 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-32878		 CWE-1321 Medium
No
No
 8.6.44, 9.6.0 alpha.20 20.03.2026 SB2026032042
#VU124163 - Exposure of sensitive information to an unauthorized actor
CVE-2026-33163		 CWE-200 Medium
No
No
 8.6.50, 9.6.0 alpha.35 20.03.2026 SB2026032040
#VU124162 - Observable Response Discrepancy
CVE-2026-33323		 CWE-204 Medium
No
No
 8.6.51, 9.6.0 alpha.40 20.03.2026 SB2026032039
#VU124161 - Improper Authentication
CVE-2026-33409		 CWE-287 Low
No
No
 8.6.52, 9.6.0 alpha.41 20.03.2026 SB2026032038
#VU124160 - Incorrect Authorization
CVE-2026-33421		 CWE-863 Medium
No
No
 8.6.53, 9.6.0 alpha.42 20.03.2026 SB2026032037
#VU124159 - Observable discrepancy
CVE-2026-33429		 CWE-203 Medium
No
No
 8.6.54, 9.6.0 alpha.43 20.03.2026 SB2026032036


Showing elements 61 - 80 out of 102