Manuel
|
7cb266b207
|
refactor: Prototype pollution via Cloud Code Webhooks; fixes security vulnerability [GHSA-93vw-8fm5-p2jf](https://github.com/parse-community/parse-server/security/advisories/GHSA-93vw-8fm5-p2jf) (#8308)
|
2022-11-10 00:24:42 +01:00 |
|
Manuel
|
d27dfa3464
|
refactor: Parse Server option requestKeywordDenylist can be bypassed via Cloud Code Webhooks or Triggers; fixes security vulnerability [GHSA-xprv-wvh7-qqqx](https://github.com/parse-community/parse-server/security/advisories/GHSA-xprv-wvh7-qqqx) (#8304)
|
2022-11-09 20:02:05 +01:00 |
|
Manuel
|
42581225f1
|
refactor: Remote code execution via MongoDB BSON parser through prototype pollution; fixes security vulnerability [GHSA-prm5-8g2m-24gg](https://github.com/parse-community/parse-server/security/advisories/GHSA-prm5-8g2m-24gg) (#8297)
|
2022-11-07 23:17:03 +01:00 |
|
Manuel
|
0d6f9e951d
|
fix: sensitive keyword detection may produce false positives (#7881)
|
2022-03-24 02:54:07 +01:00 |
|
Manuel
|
971adb5438
|
fix: security vulnerability that allows remote code execution (GHSA-p6h4-93qp-jhcm) (#7843)
|
2022-03-12 13:49:57 +01:00 |
|