CVE-2026-119570

Parse Server from 9.7.0 before 9.10.5-alpha.7 contains an information disclosure vulnerability that allows clients to receive protected field values written by beforeSave triggers using dot notation keys. When protectedFieldsSaveResponseExempt is set to false, clients with create or update...

CVE-2026-119570 Parse Server 9.7.0 before 9.10.5-alpha.7 Protected Field Exposure in Save Responses

Parse Server from 9.7.0 before 9.10.5-alpha.7 contains an information disclosure vulnerability that allows clients to receive protected field values written by beforeSave triggers using dot notation keys. When protectedFieldsSaveResponseExempt is set to false, clients with create or update...

CVE-2026-119570

The Parse Server versions 9.7.0 before 9.10.5-alpha.7 are vulnerable to an information disclosure vulnerability. This issue occurs when beforeSave triggers write values using dot notation keys; specifically, if protectedFieldsSaveResponseExempt is set to false, clients with create or update permi...

EUVD-2026-113924

Parse Server from 9.7.0 before 9.10.5-alpha.7 contains an information disclosure vulnerability that allows clients to receive protected field values written by beforeSave triggers using dot notation keys. When protectedFieldsSaveResponseExempt is set to false, clients with create or update...

PT-2026-133539

Parse Server from 9.7.0 before 9.10.5-alpha.7 contains an information disclosure vulnerability that allows clients to receive protected field values written by beforeSave triggers using dot notation keys. When protectedFieldsSaveResponseExempt is set to false, clients with create or update...