All vulnerabilities

Servers and applications

GHSA-8j8q-73xx-w3m4

Installation update is written to the installation named by the request's installation ID instead of the addressed object

Severity
Medium 6.3
Published
15 Oct 2026
Last changed
15 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.10.5-alpha.10
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
Parse ServerServers and applications · github:parse-community/parse-server
  • From 9.7.0 before 9.10.5-alpha.10

References