Parse-community
83 CVEs tracked since 2022. Since Sep 2022, none of them reached CISA KEV.
Parse-community CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2022-09 | 3 | 0 |
| 2022-10 | null or fewer | |
| 2022-11 | null or fewer | |
| 2022-12 | null or fewer | |
| 2023-01 | null or fewer | |
| 2023-02 | null or fewer | |
| 2023-03 | null or fewer | |
| 2023-04 | null or fewer | |
| 2023-05 | null or fewer | |
| 2023-06 | null or fewer | |
| 2023-07 | null or fewer | |
| 2023-08 | null or fewer | |
| 2023-09 | null or fewer | |
| 2023-10 | null or fewer | |
| 2023-11 | null or fewer | |
| 2023-12 | null or fewer | |
| 2024-01 | null or fewer | |
| 2024-02 | null or fewer | |
| 2024-03 | null or fewer | |
| 2024-04 | null or fewer | |
| 2024-05 | null or fewer | |
| 2024-06 | null or fewer | |
| 2024-07 | null or fewer | |
| 2024-08 | null or fewer | |
| 2024-09 | null or fewer | |
| 2024-10 | null or fewer | |
| 2024-11 | null or fewer | |
| 2024-12 | null or fewer | |
| 2025-01 | null or fewer | |
| 2025-02 | null or fewer | |
| 2025-03 | null or fewer | |
| 2025-04 | null or fewer | |
| 2025-05 | null or fewer | |
| 2025-06 | null or fewer | |
| 2025-07 | null or fewer | |
| 2025-08 | null or fewer | |
| 2025-09 | null or fewer | |
| 2025-10 | null or fewer | |
| 2025-11 | null or fewer | |
| 2025-12 | null or fewer | |
| 2026-01 | null or fewer | |
| 2026-02 | null or fewer | |
| 2026-03 | 65 | 0 |
| 2026-04 | null or fewer | |
| 2026-05 | null or fewer | |
| 2026-06 | 8 | 0 |
| 2026-07 | 7 | 0 |
Products
The products that kept showing up in Parse-community's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Parse-community.
- CVE-2026-100631Parse Server 9.0.0 Unauthenticated Installation Deletion via Operator Injection7.5
- CVE-2026-100632Parse Server 9.0.0 before 9.10.1 Protected Fields Disclosure via LiveQuery6.5
- CVE-2026-87806Parse Server 9.0.0 Authentication Bypass via LDAP Empty Password7.4
- CVE-2026-66009Parse Server 9.0.0 Information Disclosure via GraphQL Error Messages—
- CVE-2026-66008Parse Server 9.0.0 Information Disclosure via GraphQL Error Messages—
- CVE-2026-64627Parse Server 9.0.0 Schema Disclosure via GraphQL Variable Coercion—
- CVE-2026-61448Parse Server 9.0.0 Stored XSS via malformed Content-Type—
- CVE-2026-57481Parse Server: LiveQuery discloses object data to a subscriber across an ACL read-access change—
- CVE-2026-57480Parse Server: Denial of service via exponential-time processing of deeply nested query operators—
- CVE-2026-55778Parse Server: Stored XSS via non-standard file extension bypassing file upload extension blocklist—
- CVE-2021-47987Parse Server - Arbitrary Code Execution via Malicious Version Tags7.5
- CVE-2021-47986Parse Server - Unreviewed Code Execution via Malicious Version Tags7.5
- CVE-2026-53726Parse Server: Relation `$relatedTo` query bypasses `protectedFields` and owning-object ACL—
- CVE-2026-53725Parse Server: Endpoints `/login` and `/verifyPassword` disclose MFA secrets and protected fields when `_User` get is denied—
- CVE-2026-53724Parse Server: Stored XSS via trailing-dot filename bypassing file upload extension blocklist—
The record
- Peak rank
- #19 in Mar 2026
- Busiest month shown
- Mar 2026, 65 CVEs
- Months with a KEV entry
- 0 since Sep 2022
- Monthly snapshots
- 4 since 2022