Skip to content
OpenAdvisories

Vendor

parse-community

157 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-67727 Public exploit

    Parse Server GitHub CI workflow vulnerable to RCE through Improper Privilege Management

    Parse Server is an open source backend that can be deployed to any infrastructure that runs Node.js. In versions prior to 8.6.0-alpha.2, a GitHub CI workflow is triggered in a way that grants the GitHub Actions workflow elevated permissions, giving it access …