CVE-2026-35200

Description

Parse Server: File upload Content-Type override via extension mismatch

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://github.com/parse-community/parse-server/security/advisories/GHSA-vr5f-2r24-w5hc
• https://nvd.nist.gov/vuln/detail/CVE-2026-35200
• https://github.com/parse-community/parse-server/pull/10383
• https://github.com/parse-community/parse-server/pull/10384
• https://github.com/parse-community/parse-server