CVE-2026-33163

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.35 and 8.6.50, when a "Parse.Cloud.afterLiveQueryEvent" trigger is registered for a class, the LiveQuery server leaks protected fields and "authData" to all subscribers of...

CVE-2026-33163

Summary: CVE-2026-33163 affects Parse Server’s LiveQuery afterEvent trigger. Before versions 9.6.0-alpha.35 and 8.6.50, when a class has a Parse.Cloud.afterLiveQueryEvent trigger, the LiveQuery event payload could leak protected fields and authData to subscribers of that class. The leak stems fro...

EUVD-2022-6325

Malicious code in bioql PyPI...