CVE-2026-121965 | parse-community Parse Server up to 8.6.112/9.10.5-alpha.5 LiveQuery prototype pollution

A vulnerability has been found in parse-community Parse Server up to 8.6.112/9.10.5-alpha.5 and classified as critical. Affected is an unknown function of the component LiveQuery. Performing a manipulation results in improperly controlled modification of object prototype attributes.

This vulnerability was named CVE-2026-121965. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More