Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-27298
10
CRITICALCVSS v3
Published
March 1, 2024
Affected
2 projects
Assigned by
GitHub
Severity scale
010
Description
parse-server is a Parse Server for Node.js / Express. This vulnerability allows SQL injection when Parse Server is configured to use the PostgreSQL database. The vulnerability has been fixed in 6.5.0 and 7.0.0-alpha.20.
parse-community/parse-server
GitHubParse Server for Node.js / Express
GitHubParse Server for Node.js / Express< 6.5.0, = 6.5.0, = 7.0.0, >= 7.0.0-alpha.1, < 7.0.0-alpha.20NVD
parse-server
NPMAn express module providing a Parse-compatible API server
NPMAn express module providing a Parse-compatible API server< 6.5.0, = 6.5.0, = 7.0.0, >= 7.0.0-alpha.1, < 7.0.0-alpha.20OSV