CVE-2026-34573

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.68 and 9.7.0-alpha.12, the GraphQL query complexity validator can be exploited to cause a denial-of-service by sending a crafted query with binary fan-out fragment spreads...

CVE-2026-34573

creationtimestamp| type| source ---|---|--- 2026-03-31 17:26:20+00:00| published-proof-of-concept| Telegram/eKNKUl3o6DiU-2-jA1Bozh3wu6D5ajzBDCTSMbn5G7zvLo 2026-03-31 19:06:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mieuo7xpy52t...