CVE-2026-33163

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.35 and 8.6.50, when a "Parse.Cloud.afterLiveQueryEvent" trigger is registered for a class, the LiveQuery server leaks protected fields and "authData" to all subscribers of...