CVE-2026-109301 - Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3 Denial of Service via File Pointer Without URL
CVE ID :CVE-2026-109301 Published : Oct. 12, 2026, 5:17 p.m. | 14 minutes ago Description :Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3 does not resolve file references lacking a URL before passing objects to Cloud Code triggers and LiveQuery, causing an uncaught exception that...