parse-server is a Parse Server for Node.js / Express. This vulnerability allows SQL injection when Parse Server is configured to use the PostgreSQL database. The vulnerability has been fixed in 6.5.0 and 7.0.0-alpha.20.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| parse-server(npm) | 0 | 6.5.0 | N/A |
| parse-server(npm) | 7.0.0-alpha.1 | 7.0.0-alpha.20 | N/A |
CVSS Metrics
