CVE-2026-124425

The Parse Server software versions 8.6.109 (before 8.6.116) and 9.10.6-alpha.1 (before 9.10.7-alpha.2) are vulnerable to an information disclosure flaw. The root cause is that create or update responses mark fields as deleted based on stored values that the caller is not authorized to read. Conse...