CVE-2026-47138

CVE-2026-47138

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.77 and 9.9.1-alpha.1, an unauthenticated attacker who knows a publicly-known Parse Application ID can submit a si…

Vulnerability class: ReDoS (Regular Expression Denial of Service)

Weakness classification (CWE)

References