MAL-2025-190870 Malicious code in @mparpaillon/connector-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffec89e4bd3b2d309b636261098474ed4816b5b9bd40872855c24c082de3666c The package @mparpaillon/connector-parse was found to contain malicious code...

Prototype Pollution

Overview parse is a library that gives you access to the powerful Parse Server backend from your JavaScript app. Affected versions of this package are vulnerable to Prototype Pollution which allows an attacker to execute arbitrary code remotely by injecting a malicious payload into affected APIs,...

CVE-2025-57324

parse is a package designed to parse JavaScript SDK. A Prototype Pollution vulnerability in the SingleInstanceStateController.initializeState function of parse version 5.3.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of...

GHSA-9G8M-V378-PCG3 parse is vulnerable to prototype pollution

parse is a package designed to parse JavaScript SDK. A Prototype Pollution vulnerability in the SingleInstanceStateController.initializeState function of parse allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service DoS as the minimum...

MAL-2025-12974 Malicious code in @zalastax/nolb-parse (npm)

The package @zalastax/nolb-parse was found to contain malicious code...

MAL-2025-5988 Malicious code in router-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d79988cd859092569021535b2a0ed329cc589611cb68ee789a342c0a1b0945e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in http-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ccd584e4eb76b2b7e3035e858a3af89bdbdf42190aef321dffd99632232fab5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2020-8124

Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks...