parse-server: Server option routeAllowList is bypassable through batch sub-requests
Moderate severity
GitHub Reviewed
Published
May 27, 2026
in
parse-community/parse-server
•
Updated Jun 19, 2026
Give feedback on Dependabot alerts