Alta
CVE-2026-33539
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 117
Restablecer filtros
Alta
CVE-2026-33538
Parse Server: Denial of Service via unindexed database query for unconfigured auth providers
Media
CVE-2026-33527
Parse Server's Session Update endpoint allows overwriting server-generated session fields
Alta
CVE-2026-33508
Parse Server LiveQuery subscription query depth bypass
Alta
CVE-2026-33498
Parse Server has a query condition depth bypass via pre-validation transform pipeline
Media
CVE-2026-33429
Parse Server has a protected field change detection oracle via LiveQuery watch parameter
Alta
CVE-2026-33421
Parse Server's LiveQuery bypasses CLP pointer permission enforcement
Alta
CVE-2026-33409
Parse Server has an auth provider validation bypass on login via partial authData
Media
CVE-2026-33323
Parse Server email verification resend page leaks user existence
Alta
CVE-2026-33163
Parse Server leaks protected fields via LiveQuery afterEvent trigger
Media
CVE-2026-33042
Parse Server affected by empty authData bypassing credential requirement on signup
Media
CVE-2026-32770
Parse Server LiveQuery subscription with invalid regular expression crashes server
Media
CVE-2026-32742
Parse Server session creation endpoint allows overwriting server-generated session fields
Media
CVE-2026-32878
Parse Server vulnerable to schema poisoning via prototype pollution in deep copy
Alta
CVE-2026-32886
Parse Server's Cloud function dispatch crashes server via prototype chain traversal
Baja
CVE-2026-32943
Parse Server has a password reset token single-use bypass via concurrent requests
Alta
CVE-2026-32944
Parse Server crash via deeply nested query condition operators
Alta
CVE-2026-32728
Parse Server has a stored XSS filter bypass via Content-Type MIME parameter and missing XML extension blocklist entries
Media
CVE-2026-32594
Parse Server's GraphQL WebSocket endpoint bypasses security middleware
Media
CVE-2026-32269
Parse Server OAuth2 adapter app ID validation sends wrong token to introspection endpoint
Crítica
CVE-2026-32248
Parse Server: Account takeover via operator injection in authentication data identifier
Crítica
CVE-2026-32242
Parse Server's OAuth2 adapter shares mutable state across providers via singleton instance
Media
CVE-2026-32234
Parse Server has a SQL injection via query field name when using PostgreSQL
Media
CVE-2026-32098
Parse Server has a protected fields bypass via LiveQuery subscription WHERE clause
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.