parse-community Parse-SDK-JS vulnerabilities (CVE)

CVE records published for parse-community Parse-SDK-JS, newest first. Follow to get an email when a new one appears.

1 results

6.4Medium

CVE-2025-62374 1 year ago

Parse Javascript SDK vulnerable to prototype pollution in `Parse.Object` and internal APIs

parse-community Parse-SDK-JS

Parse Javascript SDK provides access to the powerful Parse Server backend from your JavaScript app. Prior to 7.0.0, injection of malicious payload allows attacker to remotely execute arbitrary code. ParseObject.fromJSON, ParseObject.pin, ParseObject.register…