Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/13 12:28 p.m.6 views

BIT-PARSE-2026-31871 Parse Server has a SQL Injection via dot-notation sub-key name in `Increment` operation on PostgreSQL

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0 and 8.6.31, a SQL injection vulnerability exists in the PostgreSQL storage adapter when processing Increment operations on nested object fields using dot notation e.g.,...

9.8CVSS6AI score0.00418EPSS
SaveExploits0References4
Rows per page
Query Builder