Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2026/03/24 6:21 p.m.21 views

CVE-2026-33508 Parse Server: LiveQuery subscription query depth bypass

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.56 and 9.6.0-alpha.45, Parse Server's LiveQuery component does not enforce the requestComplexity.queryDepth configuration setting when processing WebSocket subscription...

8.2CVSS0.00345EPSS
SaveExploits0References5
OSV
OSV
added 2026/03/24 6:21 p.m.12 views

CVE-2026-33508 Parse Server: LiveQuery subscription query depth bypass

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.56 and 9.6.0-alpha.45, Parse Server's LiveQuery component does not enforce the requestComplexity.queryDepth configuration setting when processing WebSocket subscription...

8.2CVSS5.8AI score0.00345EPSS
SaveExploits0References7
Rows per page
Query Builder