Skip to content
OpenAdvisories

Product · parse-community

Parse-SDK-JS

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2025-62374

    Parse Javascript SDK vulnerable to prototype pollution in `Parse.Object` and internal APIs

    Parse Javascript SDK provides access to the powerful Parse Server backend from your JavaScript app. Prior to 7.0.0, injection of malicious payload allows attacker to remotely execute arbitrary code. ParseObject.fromJSON, ParseObject.pin, ParseObject.registerS…

    parse-community Parse-SDK-JS parse npm