mtrezza

Parse Server before 8.6.97 and 9.10.2-alpha.6 Denial of Service via Unhandled Email Error

Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 GraphQL Schema Disclosure via Persisted Queries

Parse Server 9.0.0 before 9.10.2-alpha.5 Transactional Batch Request Write Interference

Parse Server before 8.6.93 and 9.0.0 before 9.10.1-alpha.13 protectedFields Bypass via Relation Count Query

Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3 Denial of Service via File Pointer Without URL

Parse Server 9.0.0 before 9.10.1-alpha.12 Class Name Disclosure via GraphQL Errors

Parse Server 9.0.0 Authentication Bypass via Unverified Provider Identity

Parse Server 9.0.0 Unauthenticated Installation Deletion via Operator Injection

Parse Server 9.0.0 before 9.10.1 Protected Fields Disclosure via LiveQuery

Parse Server 9.0.0 Authentication Bypass via LDAP Empty Password