Information disclosure in Parse-community Parse-server
CVE-2026-64627
Parse Server versions >= 9.0.0 before 9.10.0-alpha.4 and versions before 8.6.85 contain a schema disclosure vulnerability. When the GraphQL API is mounted with public introspection disabled (graphQLPublicIntrospection: false, the default)…
Affected products
- Parse-community Parse-server — versions 9.0.0, 9.10.0-alpha.4, 0
Weakness classification (CWE)
References
- disclosure@vulncheck.com (vendor-advisory)
- disclosure@vulncheck.com (third-party-advisory)