CVE-2023-32688

npm/parse-server-push-adapter CVE-2023-32688: medium 4.9

Invalid push request payload crashes Parse Server

Action: Upgrade parse-server-push-adapter to 4.1.3 or later.

npm i parse-server-push-adapter@4.1.3

Affected

Fixed versions

Sources

• osv: GHSA-mxhg-rvwx-x993
• https://github.com/parse-community/parse-server-push-adapter/security/advisories/GHSA-mxhg-rvwx-x993
• https://nvd.nist.gov/vuln/detail/CVE-2023-32688
• https://github.com/parse-community/parse-server-push-adapter/pull/217
• https://github.com/parse-community/parse-server-push-adapter/commit/598cb84d0866b7c5850ca96af920e8cb5ba243ec
• https://github.com/parse-community/parse-server-push-adapter
• https://github.com/parse-community/parse-server-push-adapter/releases/tag/4.1.3

CVE-2023-32688 · published 2023-05-22T19:50:04Z · modified 2026-09-10T03:50:01.762870393Z · JSON