Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-47986
Description
Parse Server before 4.10.0 contains a supply chain vulnerability where incorrect version tags were pushed to the repository linking to unreviewed code in a personal fork. Attackers could exploit this by specifying affected version tags in dependency declarations to execute unreviewed and potentially malicious code.
parse-community/parse-server
GitHubParse Server for Node.js / Express
GitHubParse Server for Node.js / Express>= 4.0.0, < 4.5.2, >= 4.6.0, < 4.10.0NVD
parse-server
NPMAn express module providing a Parse-compatible API server
NPMAn express module providing a Parse-compatible API server>= 4.0.0, < 4.5.2, >= 4.6.0, < 4.10.0OSV