CVE-2026-33508

🗓️ 24 Mar 2026 18:21:08Reported by GitHub_MType

CVE-2026-33508: LiveQuery depth bypass in Parse Server causes CPU exhaustion; patched in 8.6.56 and 9.6.0-alpha.45.

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2026-33508	24 Mar 202618:21	–	attackerkb
CNNVD	Parse Server 安全漏洞	24 Mar 202600:00	–	cnnvd
Cvelist	CVE-2026-33508 Parse Server: LiveQuery subscription query depth bypass	24 Mar 202618:21	–	cvelist
EUVD	EUVD-2026-13917	26 Mar 202617:38	–	euvd
Github Security Blog	Parse Server LiveQuery subscription query depth bypass	20 Mar 202621:48	–	github
NVD	CVE-2026-33508	24 Mar 202619:16	–	nvd
OSV	BIT-PARSE-2026-33508 Parse Server: LiveQuery subscription query depth bypass	27 Mar 202607:14	–	osv
OSV	GHSA-6QH5-M6G3-XHQ6 Parse Server LiveQuery subscription query depth bypass	20 Mar 202621:48	–	osv
Positive Technologies	PT-2026-26791	20 Mar 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-33508	26 Mar 202615:01	–	redhatcve

NVD

Vulners

Node

parseplatform parse-serverRange<8.6.56node.js

parseplatform parse-serverRange9.0.0–9.6.0node.js

parseplatform parse-serverMatch9.6.0alpha1node.js

parseplatform parse-serverMatch9.6.0alpha10node.js

parseplatform parse-serverMatch9.6.0alpha11node.js

parseplatform parse-serverMatch9.6.0alpha12node.js

parseplatform parse-serverMatch9.6.0alpha13node.js

parseplatform parse-serverMatch9.6.0alpha14node.js

parseplatform parse-serverMatch9.6.0alpha15node.js

parseplatform parse-serverMatch9.6.0alpha16node.js

parseplatform parse-serverMatch9.6.0alpha17node.js

parseplatform parse-serverMatch9.6.0alpha18node.js

parseplatform parse-serverMatch9.6.0alpha19node.js

parseplatform parse-serverMatch9.6.0alpha2node.js

parseplatform parse-serverMatch9.6.0alpha20node.js

parseplatform parse-serverMatch9.6.0alpha21node.js

parseplatform parse-serverMatch9.6.0alpha22node.js

parseplatform parse-serverMatch9.6.0alpha23node.js

parseplatform parse-serverMatch9.6.0alpha24node.js

parseplatform parse-serverMatch9.6.0alpha25node.js

parseplatform parse-serverMatch9.6.0alpha26node.js

parseplatform parse-serverMatch9.6.0alpha27node.js

parseplatform parse-serverMatch9.6.0alpha28node.js

parseplatform parse-serverMatch9.6.0alpha29node.js

parseplatform parse-serverMatch9.6.0alpha3node.js

parseplatform parse-serverMatch9.6.0alpha30node.js

parseplatform parse-serverMatch9.6.0alpha31node.js

parseplatform parse-serverMatch9.6.0alpha32node.js

parseplatform parse-serverMatch9.6.0alpha33node.js

parseplatform parse-serverMatch9.6.0alpha34node.js

parseplatform parse-serverMatch9.6.0alpha35node.js

parseplatform parse-serverMatch9.6.0alpha36node.js

parseplatform parse-serverMatch9.6.0alpha37node.js

parseplatform parse-serverMatch9.6.0alpha38node.js

parseplatform parse-serverMatch9.6.0alpha39node.js

parseplatform parse-serverMatch9.6.0alpha4node.js

parseplatform parse-serverMatch9.6.0alpha40node.js

parseplatform parse-serverMatch9.6.0alpha41node.js

parseplatform parse-serverMatch9.6.0alpha42node.js

parseplatform parse-serverMatch9.6.0alpha43node.js

parseplatform parse-serverMatch9.6.0alpha44node.js

parseplatform parse-serverMatch9.6.0alpha5node.js

parseplatform parse-serverMatch9.6.0alpha6node.js

parseplatform parse-serverMatch9.6.0alpha7node.js

parseplatform parse-serverMatch9.6.0alpha8node.js

parseplatform parse-serverMatch9.6.0alpha9node.js

[
  {
    "vendor": "parse-community",
    "product": "parse-server",
    "versions": [
      {
        "version": "< 8.6.56",
        "status": "affected"
      },
      {
        "version": ">= 9.0.0, < 9.6.0-alpha.45",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/parse-community/parse-server/pull/10259
github	www.github.com/parse-community/parse-server/commit/2126fe4e12f9b399dc6b4b6a3fa70cb1825f159b
github	www.github.com/parse-community/parse-server/commit/060d27053fb0fadf613c25aabab7fe0c82b7a899
github	www.github.com/parse-community/parse-server/pull/10260
github	www.github.com/parse-community/parse-server/security/advisories/GHSA-6qh5-m6g3-xhq6

17 Jun 2026 10:37Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.17.5

CVSS 48.2

EPSS0.00345

SSVC

CWE-674