Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2021-47986 |
|
Vulnerability in parseplatform (CVE-2021-47986)
vulnerability in parseplatform (CVE-2021-47986). Successful exploitation can lead to full system takeover.
|
| CVE-2026-43930 |
|
Vulnerability in parse-server (CVE-2026-43930)
vulnerability in parse-server (CVE-2026-43930). Data can be tampered with by attackers. Exploitable via ``applyAuthDataOptimisticLock``. Mitigation: upgrade to `8.6.76` or later.
|
| CVE-2026-39381 |
|
Authorization Flaw in parseplatform (CVE-2026-39381)
vulnerability in parseplatform (CVE-2026-39381). Risk of unauthorized operations or information disclosure. Exploitable via `GET /sessions/me`. Mitigation: upgrade to `9.8.0-alpha.7` or later.
|
| CVE-2026-35200 |
|
Vulnerability in parseplatform (CVE-2026-35200)
vulnerability in parseplatform (CVE-2026-35200). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.6.73` or later.
|
| CVE-2026-34215 |
|
Information Disclosure in parseplatform (CVE-2026-34215)
vulnerability in parseplatform (CVE-2026-34215). Confidential information can be exposed externally.
|
| CVE-2026-34784 |
|
Vulnerability in parseplatform (CVE-2026-34784)
vulnerability in parseplatform (CVE-2026-34784). Confidential information can be exposed externally.
|
| CVE-2026-34595 |
|
Vulnerability in parseplatform (CVE-2026-34595)
vulnerability in parseplatform (CVE-2026-34595). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34573 |
|
Vulnerability in parseplatform (CVE-2026-34573)
vulnerability in parseplatform (CVE-2026-34573). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34574 |
|
Vulnerability in parseplatform (CVE-2026-34574)
vulnerability in parseplatform (CVE-2026-34574). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34532 |
|
Authorization Flaw in parseplatform (CVE-2026-34532)
vulnerability in parseplatform (CVE-2026-34532). Confidential information can be exposed externally.
|
| CVE-2026-34373 |
|
Vulnerability in parseplatform (CVE-2026-34373)
vulnerability in parseplatform (CVE-2026-34373). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34224 |
|
Vulnerability in parseplatform (CVE-2026-34224)
vulnerability in parseplatform (CVE-2026-34224). Data can be tampered with by attackers.
|
| CVE-2026-34363 |
|
Vulnerability in parseplatform (CVE-2026-34363)
vulnerability in parseplatform (CVE-2026-34363). Confidential information can be exposed externally.
|
| CVE-2026-27609 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-27609)
vulnerability in csrf (CVE-2026-27609). Data can be tampered with by attackers. Exploitable via `POST /apps/`.
|
| CVE-2026-27610 |
|
Vulnerability in parseplatform (CVE-2026-27610)
vulnerability in parseplatform (CVE-2026-27610). Confidential information can be exposed externally. Exploitable via ``ConfigKeyCache``.
|
| CVE-2026-27608 |
|
Vulnerability in parseplatform (CVE-2026-27608)
vulnerability in parseplatform (CVE-2026-27608). Confidential information can be exposed externally. Exploitable via `POST /apps/`.
|
| CVE-2026-27595 |
|
Vulnerability in csrf (CVE-2026-27595)
vulnerability in csrf (CVE-2026-27595). Data can be tampered with by attackers. Exploitable via ``readOnlyMasterKey``.
|