CVE-2026-109301

Parse Server versions prior to 8.6.95 and 9.0.0 before 9.10.2-alpha.3 are vulnerable to a Denial of Service attack. The root cause is the failure to resolve file references lacking a URL before passing objects to Cloud Code triggers and LiveQuery , which results in an uncaught exception that term...