Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: parse-community parse-server — GitHub Security Advisory (GHSA-593v-wcqx-hq2w) Clear all filters
TI-2021-22600 CVE-2021-47987 · GHSA-h6qh-8r3c-pc9v

Parse Server - Arbitrary Code Execution via Malicious Version Tags

Priority LOW 35

Parse Server before 4.10.0 was affected by a supply chain incident in which incorrect version tags were pushed to the official repository pointing to an unreviewed personal fork of a contributor with write access.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00178 Published 2026-06-25 Fixed in 4.10.0 CWE-494
TI-2021-22599 CVE-2021-47986 · GHSA-g938-h978-wf7v

Parse Server - Unreviewed Code Execution via Malicious Version Tags

Priority LOW 35

Parse Server before 4.10.0 contains a supply chain vulnerability where incorrect version tags were pushed to the repository linking to unreviewed code in a personal fork.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.0018 Published 2026-06-25 Fixed in 4.10.0 CWE-494