CVE-2026-121965

The Parse Server software versions before 8.6.113 and 9.0.0 before 9.10.6-alpha.5 are vulnerable to a prototype pollution vulnerability (CWE-1321). This occurs when the server builds objects for Cloud Code triggers and LiveQuery using a dot notation key where an intermediate segment resolves thro...