Lucene search
+L

3 matches found

OSV
OSV
added 2026/03/12 2:47 p.m.15 views

BIT-PARSE-2026-30925 Parse Server affected by Regular Expression Denial of Service (ReDoS) via `$regex` query in LiveQuery

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.0 and 8.6.11, a malicious client can subscribe to a LiveQuery with a crafted $regex pattern that causes catastrophic backtracking, blocking the Node.js event loop. This makes the...

8.2CVSS5.8AI score0.00446EPSS
SaveExploits0References4
Rows per page
Query Builder