CVE-2025-57324

The parse JavaScript SDK package is vulnerable to a Prototype Pollution vulnerability in the SingleInstanceStateController.initializeState function (affected versions 5.3.0 and before ). An attacker can supply a crafted payload, such as specifying a className value of proto, to inject malicious p...