Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-43930 |
|
Vulnerability in parse-server (CVE-2026-43930)
vulnerability in parse-server (CVE-2026-43930). Data can be tampered with by attackers. Exploitable via ``applyAuthDataOptimisticLock``. Mitigation: upgrade to `8.6.76` or later.
|
| CVE-2026-27609 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-27609)
vulnerability in csrf (CVE-2026-27609). Data can be tampered with by attackers. Exploitable via `POST /apps/`.
|
| CVE-2026-27610 |
|
Vulnerability in parseplatform (CVE-2026-27610)
vulnerability in parseplatform (CVE-2026-27610). Confidential information can be exposed externally. Exploitable via ``ConfigKeyCache``.
|
| CVE-2026-27595 |
|
Vulnerability in csrf (CVE-2026-27595)
vulnerability in csrf (CVE-2026-27595). Data can be tampered with by attackers. Exploitable via ``readOnlyMasterKey``.
|
| CVE-2026-27608 |
|
Vulnerability in parseplatform (CVE-2026-27608)
vulnerability in parseplatform (CVE-2026-27608). Confidential information can be exposed externally. Exploitable via `POST /apps/`.
|