CVE-2026-123487

The Parse Server software is vulnerable to a Regular Expression Denial of Service (ReDoS) in versions before 8.6.115 and 9.0.0 before 9.10.7-alpha.1 . The issue stems from an inefficient regular expression used to validate user email addresses, which lacks a length limit and exhibits quadratic ru...