Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.9 and 9.5.0-alpha.9, the file metadata endpoint (GET /files/:appId/metadata/:filename) does not enforce beforeFind / afterFind file triggers. When these triggers are used as access-control gates, the metadata endpoint bypasses them entirely, allowing unauthorized access to file metadata. This issue has been patched in versions 8.6.9 and 9.5.0-alpha.9.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-07 | 2 | Disclosure1Patch1 |
| 2026-03-09 | 1 | Disclosure1 |
🟠 Parse Server, Missing Authorization, #CVE-2026-30850 (moderate) https://dailycve.com/parse-server-missing-authorization-cve-2026-30850-moderate/
Post summary
The text announces CVE-2026-30850 as a moderate‑severity missing authorization flaw in Parse Server, but does not provide evidence of exploitation, a PoC, a patch, or false‑positive claims.
CVE-2026-30850 Parse Server Metadata Endpoint Bypass Enabling Unauthorized File Information Access https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30850
Post summary
The post announces CVE‑2026‑30850, detailing a metadata endpoint bypass in Parse Server that permits unauthorized file information access.
CVE-2026-30850 Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.9 and 9.5.0-alpha.9, the file metadata e… https://www.cve.org/CVERecord?id=CVE-2026-30850
Post summary
The text notes CVE-2026-30850, indicates that versions 8.6.9 and 9.5.0-alpha.9 remediate the issue, and provides a link to the CVE record.
10 of 10 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | parseplatform | parse-server | - | node.js | - |
| App | parseplatform | parse-server | 9.5.0 | node.js | - |
| App | parseplatform | parse-server | 9.5.0 | node.js | - |
| App | parseplatform | parse-server | 9.5.0 | node.js | - |
| App | parseplatform | parse-server | 9.5.0 | node.js | - |
| App | parseplatform | parse-server | 9.5.0 | node.js | - |
| App | parseplatform | parse-server | 9.5.0 | node.js | - |
| App | parseplatform | parse-server | 9.5.0 | node.js | - |
| App | parseplatform | parse-server | 9.5.0 | node.js | - |
| App | parseplatform | parse-server | 9.5.0 | node.js | - |