Threats tagged 'ghsa-vx56-7cxr-7m5w'

Parse Server versions before 8.6.113 and 9.0.0 before 9.10.6-alpha.5 contain a prototype pollution vulnerability affecting Cloud Code triggers and LiveQuery. This flaw allows clients with write access to corrupt built-in functions by exploiting dot notation keys that traverse inherited members, causing denial of service until the server is restarted.