CVE-2021-47986

HIGH SEVERITY

CVSS Score & Metrics

Base Score

7.5 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H                                    

Vulnerability Description

Parse Server before 4.10.0 contains a supply chain vulnerability where incorrect version tags were pushed to the repository linking to unreviewed code in a personal fork. Attackers could exploit this by specifying affected version tags in dependency declarations to execute unreviewed and potentially malicious code.

Vulnerability Details

Published Date

June 25, 2026

Last Modified

June 26, 2026

CWE ID

CWE-494

Source

NVD

Vendor

parse-community

Product

parse-server

External References

https://github.com/parse-community/parse-server/security/advisories/GHSA-593v-wcqx-hq2w
https://www.vulncheck.com/advisories/parse-server-unreviewed-code-execution-via-malicious-version-tags

CVE-2021-47986

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment