CVE-2026-110854

Parse Server versions prior to 8.6.97 and 9.0.0 before 9.10.2-alpha.6 are vulnerable to a Denial of Service (DoS) attack. The root cause is an unhandled exception (CWE-248) occurring when the server attempts to send verification or password reset emails. If a mail provider rejects the request, ap...