Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

npm package

parse-server-push-adapter

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. Medium, CVSS 4.9npmAmendedPublished

    Invalid push request payload crashes Parse Server

    CVE-2023-32688 · GHSA-mxhg-rvwx-x993

    Affected
    • npm parse-server-push-adapter < 4.1.3
    Fixed in
    4.1.3· Vendor fix available
    Issue
    Impact The Parse Server Push Adapter can crash Parse Server due to an invalid push notification payload. Patches Invalid push notification payload is caught and an logged. Workarounds n/a References - https://github.com/parse-community/parse-server-push-adapter/security/advisories/GHSA-mxhg-rvwx-x993 - https://github.com/parse-community/parse-server-push-adapter/pull/217

    Recommended action: Upgrade to 4.1.3 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:osv.dev (1)github.com (2)Source checked Evidence →