Description
A security incident caused a number of incorrect version tags to be pushed to the Parse Server repository. These version tags linked to a personal fork of a contributor who had write access to the repository. The code to which these tags linked has not been reviewed or approved by Parse Platform.
Recommendation
Update the parse-server package to the latest compatible version. Followings are version details:
Affected version(s): **>= 4.6.0, < 4.10.0 >= 4.0.0, < 4.5.2** Patched version(s): **4.10.0 4.5.2**
References
Related Issues
- Prototype pollution vulnerability found in Mermaid's bundled version of DOMPurify - Vulnerability
- survey-pdf Upgraded jsPDF Version Due to Security Vulnerability - CVE-2026-25630
- external-svg-loader Cross-site Scripting vulnerability - CVE-2023-40013
- Incorrect Account Used for Signing - Vulnerability
You might also like:
- Tags:
- npm
- parse-server
Anything's wrong? Let us know Last updated on January 09, 2023