Skip to content
OpenAdvisories

Product · parse-community

parse-dashboard

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.0
    CVE-2026-27610

    Parse Dashboard Has a Cache Key Collision that Leaks Master Key to Read-Only Sessions

    Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the `ConfigKeyCache` uses the same cache key for both master key and read-only master key when resolving function-typed keys. Under spe…

    parse-community parse-dashboard parse-dashboard npm
  • High 8.3
    CVE-2026-27609

    Parse Dashboard Missing CSRF Protection on Agent Endpoint

    Parse Dashboard is a standalone dashboard for managing Parse Server apps. In versions 7.3.0-alpha.42 through 9.0.0-alpha.7, the AI Agent API endpoint (`POST /apps/:appId/agent`) lacks CSRF protection. An attacker can craft a malicious page that, when visited …

    parse-community parse-dashboard parse-dashboard npm