CVE-2025-57324

The parse JavaScript SDK (version 5.3.0 and earlier) is vulnerable to a Prototype Pollution vulnerability within the SingleInstanceStateController.initializeState function. An attacker can exploit this by supplying a crafted payload to inject malicious properties into Object.prototype. This may r...