parse is a package designed to parse JavaScript SDK. A Prototype Pollution vulnerability in the SingleInstanceStateController.initializeState function of parse version 5.3.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| parse(npm) | 0 | 7.0.0-alpha.1 | N/A |
CVSS Metrics
