CVE-2026-53724

CVE-2026-53724

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.79 and 9.9.1-alpha.4, the default file upload extension blocklist can be bypassed by appending a trailing dot to…

Vulnerability class: XSS (Cross-Site Scripting)

Weakness classification (CWE)

References