Skip to content
OpenAdvisories

Package · npm

parse

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.4
    CVE-2025-62374

    Parse Javascript SDK vulnerable to prototype pollution in `Parse.Object` and internal APIs

    Parse Javascript SDK provides access to the powerful Parse Server backend from your JavaScript app. Prior to 7.0.0, injection of malicious payload allows attacker to remotely execute arbitrary code. ParseObject.fromJSON, ParseObject.pin, ParseObject.registerS…

    parse-community Parse-SDK-JS parse npm
  • Medium 6.5
    CVE-2025-57324

    parse is vulnerable to prototype pollution

    parse is a package designed to parse JavaScript SDK. A Prototype Pollution vulnerability in the SingleInstanceStateController.initializeState function of parse version 5.3.0 and before allows attackers to inject properties on Object.prototype via supplying a …

    parse npm
  • Medium —
    GHSA-wvh7-5p38-2qfc

    Storing Password in Local Storage

    The `setPassword` method (http://parseplatform.org/Parse-SDK-JS/api/2.9.1/Parse.User.html#setPassword) stores the user's password in localStorage as raw text making it vulnerable to anyone with access to your localStorage. We believe this is the only time tha…

    parse npm