Parse Server for Node.js / Express contains a critical SQL injection vulnerability (CVE-2024-27298) affecting configurations using PostgreSQL. This flaw allows SQL injection attacks via the literalizeRegexPart component. The issue has been fixed in versions 6.5.0 and 7.0.0.