agentprime: parse-community-parse-serverEvery new CVE for parse-community-parse-server.https://agentprime.io/CVE-2026-122301: Parse Server before 8.6.114 and 9.0.0 before 9.10.6-alpha.6 Information Disclosure via Object Create Responsehttps://agentprime.io/advisories/CVE-2026-122301/https://agentprime.io/advisories/CVE-2026-122301/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:07 GMTCVECVE-2026-121965: Parse Server before 8.6.113 and 9.10.6-alpha.5 Prototype Pollution via Dot Notation Keyhttps://agentprime.io/advisories/CVE-2026-121965/https://agentprime.io/advisories/CVE-2026-121965/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 15:33:27 GMTCVECVE-2026-121415: Parse Server before 8.6.111 and 9.0.0 before 9.10.6-alpha.3 Field Corruption via Null Dot Notation Keyhttps://agentprime.io/advisories/CVE-2026-121415/https://agentprime.io/advisories/CVE-2026-121415/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:28:13 GMTCVECVE-2026-121414: Parse Server before 8.6.110 and 9.0.0 before 9.10.6-alpha.2 Denial of Service via afterSave Pointer Updatehttps://agentprime.io/advisories/CVE-2026-121414/https://agentprime.io/advisories/CVE-2026-121414/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:28:13 GMTCVECVE-2026-121413: Parse Server before 8.6.112 and 9.0.0 before 9.10.6-alpha.4 Session Permission Bypass via upgradeToRevocableSessionhttps://agentprime.io/advisories/CVE-2026-121413/https://agentprime.io/advisories/CVE-2026-121413/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:28:12 GMTCVECVE-2026-120310: Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 Information Disclosure via Object Update Responsehttps://agentprime.io/advisories/CVE-2026-120310/https://agentprime.io/advisories/CVE-2026-120310/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 02:01:10 GMTCVECVE-2026-119571: Parse Server 9.7.0 before 9.10.5-alpha.10 Installation Update Misdirection via Installation IDhttps://agentprime.io/advisories/CVE-2026-119571/https://agentprime.io/advisories/CVE-2026-119571/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 13:18:10 GMTCVECVE-2026-119570: Parse Server 9.7.0 before 9.10.5-alpha.7 Protected Field Exposure in Save Responseshttps://agentprime.io/advisories/CVE-2026-119570/https://agentprime.io/advisories/CVE-2026-119570/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 13:18:10 GMTCVECVE-2026-119569: Parse Server 9.0.0 before 9.10.5-alpha.9 Prototype Pollution Denial of Servicehttps://agentprime.io/advisories/CVE-2026-119569/https://agentprime.io/advisories/CVE-2026-119569/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 13:18:09 GMTCVECVE-2026-119126: Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 afterSave Trigger and LiveQuery Bypass via Dot Notation Keyshttps://agentprime.io/advisories/CVE-2026-119126/https://agentprime.io/advisories/CVE-2026-119126/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 15:58:09 GMTCVECVE-2026-119125: Parse Server before 8.6.107 and 9.0.0 before 9.10.5-alpha.8 Information Disclosure via beforeSave Reverted Fieldshttps://agentprime.io/advisories/CVE-2026-119125/https://agentprime.io/advisories/CVE-2026-119125/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 15:58:08 GMTCVECVE-2026-116801: Parse Server 9.0.0 before 9.10.5-alpha.6 ACL Bypass via $relatedTo Queryhttps://agentprime.io/advisories/CVE-2026-116801/https://agentprime.io/advisories/CVE-2026-116801/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:33 GMTCVECVE-2026-116165: Parse Server 9.0.0 before 9.10.4-alpha.4 Unauthenticated Class Schema Deletion on MongoDBhttps://agentprime.io/advisories/CVE-2026-116165/https://agentprime.io/advisories/CVE-2026-116165/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:09 GMTCVECVE-2026-116164: Parse Server 9.0.0 before 9.10.4-alpha.3 Reserved Field Name Injection via Object Writeshttps://agentprime.io/advisories/CVE-2026-116164/https://agentprime.io/advisories/CVE-2026-116164/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:08 GMTCVECVE-2026-116163: Parse Server 9.0.0 before 9.10.5-alpha.2 Authentication Bypass via AuthAdapter Subclasseshttps://agentprime.io/advisories/CVE-2026-116163/https://agentprime.io/advisories/CVE-2026-116163/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:07 GMTCVEcriticalCVE-2026-116162: Parse Server 9.0.0 before 9.10.5-alpha.5 Privilege Escalation via SMS MFA Loginhttps://agentprime.io/advisories/CVE-2026-116162/https://agentprime.io/advisories/CVE-2026-116162/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:06 GMTCVECVE-2026-116161: Parse Server 9.0.0 before 9.10.5-alpha.4 LiveQuery Information Disclosure via $or Subscriptionshttps://agentprime.io/advisories/CVE-2026-116161/https://agentprime.io/advisories/CVE-2026-116161/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:06 GMTCVECVE-2026-112769: Parse Server before 8.6.98 and 9.x before 9.10.3-alpha.1 Session Class-Level Permission Bypasshttps://agentprime.io/advisories/CVE-2026-112769/https://agentprime.io/advisories/CVE-2026-112769/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 19:10:49 GMTCVECVE-2026-112768: Parse Server before 8.6.99 and 9.x before 9.10.3-alpha.2 Information Disclosure via User Updatehttps://agentprime.io/advisories/CVE-2026-112768/https://agentprime.io/advisories/CVE-2026-112768/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 19:10:48 GMTCVECVE-2026-110854: Parse Server before 8.6.97 and 9.10.2-alpha.6 Denial of Service via Unhandled Email Errorhttps://agentprime.io/advisories/CVE-2026-110854/https://agentprime.io/advisories/CVE-2026-110854/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 22:52:32 GMTCVECVE-2026-109954: Parse Server 9.0.0 before 9.10.2-alpha.5 Transactional Batch Request Write Interferencehttps://agentprime.io/advisories/CVE-2026-109954/https://agentprime.io/advisories/CVE-2026-109954/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 13:27:19 GMTCVECVE-2026-109303: Parse Server before 8.6.93 and 9.0.0 before 9.10.1-alpha.13 protectedFields Bypass via Relation Count Queryhttps://agentprime.io/advisories/CVE-2026-109303/https://agentprime.io/advisories/CVE-2026-109303/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:05:00 GMTCVECVE-2026-109302: Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 GraphQL Schema Disclosure via Persisted Querieshttps://agentprime.io/advisories/CVE-2026-109302/https://agentprime.io/advisories/CVE-2026-109302/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:04:59 GMTCVECVE-2026-109301: Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3 Denial of Service via File Pointer Without URLhttps://agentprime.io/advisories/CVE-2026-109301/https://agentprime.io/advisories/CVE-2026-109301/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:04:58 GMTCVECVE-2026-105828: Parse Server 9.0.0 before 9.10.1-alpha.12 Class Name Disclosure via GraphQL Errorshttps://agentprime.io/advisories/CVE-2026-105828/https://agentprime.io/advisories/CVE-2026-105828/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 14:10:29 GMTCVECVE-2026-101042: Parse Server 9.0.0 Authentication Bypass via Unverified Provider Identityhttps://agentprime.io/advisories/CVE-2026-101042/https://agentprime.io/advisories/CVE-2026-101042/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 16:28:27 GMTCVECVE-2026-100632: Parse Server 9.0.0 before 9.10.1 Protected Fields Disclosure via LiveQueryhttps://agentprime.io/advisories/CVE-2026-100632/https://agentprime.io/advisories/CVE-2026-100632/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:07 GMTCVECVE-2026-100631: Parse Server 9.0.0 Unauthenticated Installation Deletion via Operator Injectionhttps://agentprime.io/advisories/CVE-2026-100631/https://agentprime.io/advisories/CVE-2026-100631/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:07 GMTCVECVE-2026-87806: Parse Server 9.0.0 Authentication Bypass via LDAP Empty Passwordhttps://agentprime.io/advisories/CVE-2026-87806/https://agentprime.io/advisories/CVE-2026-87806/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 11:20:56 GMTCVEcriticalCVE-2026-66009: Parse Server 9.0.0 Information Disclosure via GraphQL Error Messageshttps://agentprime.io/advisories/CVE-2026-66009/https://agentprime.io/advisories/CVE-2026-66009/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jul 2026 12:07:56 GMTCVECVE-2026-66008: Parse Server 9.0.0 Information Disclosure via GraphQL Error Messageshttps://agentprime.io/advisories/CVE-2026-66008/https://agentprime.io/advisories/CVE-2026-66008/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jul 2026 12:07:55 GMTCVECVE-2026-64627: Parse Server 9.0.0 Schema Disclosure via GraphQL Variable Coercionhttps://agentprime.io/advisories/CVE-2026-64627/https://agentprime.io/advisories/CVE-2026-64627/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jul 2026 11:39:55 GMTCVECVE-2025-67727: Parse Server GitHub CI workflow vulnerable to RCE through Improper Privilege Managementhttps://agentprime.io/advisories/CVE-2025-67727/https://agentprime.io/advisories/CVE-2025-67727/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Dec 2025 06:35:52 GMTCVE