CVE-2026-116163

Parse Server versions before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 are vulnerable to an authentication bypass via custom adapters subclassing AuthAdapter . The root cause is that the validateSetUp, validateLogin, and validateUpdate methods of these custom adapters are never invoked, causing the...

EUVD-2026-109424

Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 contains an authentication bypass because the validateSetUp, validateLogin, and validateUpdate methods of custom adapters subclassing AuthAdapter are never called, and an inherited default that accepts any authData is used instead...

Improper Input Validation

github.com/cometbft/cometbft is vulnerable to Improper Input Validation. The vulnerability is due to the ValidateUpdate function within params.go because there is no proper validation for the VoteExtensionsEnableHeight. This allows an attacker to potentially cause a chain halt when exploited...