Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-46119

Fixed upstream EPSS 1%CVSS 7.5

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Parse Server crashes when uploading a file without extension. This vulnerability has been patched in versions 5.5.6 and 6.3.1.

Published 2023-10-25 · CVE record · OSV

Products: parse-community parse-server

Fixed upstream

EcosystemPackageFixed in
npmparse-server5.5.6
npmparse-server6.3.1