CVE-2026-121414

Parse Server versions prior to 8.6.110 and 9.0.0 before 9.10.6-alpha.2 are vulnerable to a Denial of Service (DoS) via a serialization error. The issue occurs when an object update uses dot notation to target a pointer field's object identifier on a class that utilizes an afterSave trigger . This...