Skip to content
OpenAdvisories

Package · npm

parse-dashboard

4 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.9

    Parse Dashboard has incomplete authentication on AI Agent endpoint

    Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (POST `/apps/:appId/agent`) has multiple security vulnerabilities that, when chained, allow unauthenticated r…

  • Critical 9.3

    Parse Dashboard Missing Authorization on Agent Endpoint

    Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (`POST /apps/:appId/agent`) does not enforce authorization. Authenticated users scoped to specific apps can a…