CVE-2026-34215

Description

Parse Server exposes auth data via verify password endpoint

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://github.com/parse-community/parse-server/security/advisories/GHSA-wp76-gg32-8258
• https://nvd.nist.gov/vuln/detail/CVE-2026-34215
• https://github.com/parse-community/parse-server/pull/10278
• https://github.com/parse-community/parse-server/pull/10279
• https://github.com/parse-community/parse-server/pull/10323
• https://github.com/parse-community/parse-server/pull/10324
• https://github.com/parse-community/parse-server/commit/5b8998e6866bcf75be7b5bb625e27d23bfaf912c
• https://github.com/parse-community/parse-server/commit/770be8647424d92f5425c41fa81065ffbbb171ed
• https://github.com/parse-community/parse-server/commit/875cf10ac979bd60f70e7a0c534e2bc194d6982f
• https://github.com/parse-community/parse-server/commit/a1d4e7b12a12f16d3870dbee582a36765858e94c
• https://github.com/parse-community/parse-server