{"action":"Upgrade parse-server to 4.5.2 (4.5.x) or 4.10.0 (4.10.x) or later.","affected":[{"fixed":"4.5.2","introduced":"4.0.0"},{"fixed":"4.10.0","introduced":"4.6.0"}],"component":"parse-server","cve_ids":["CVE-2021-47986","CVE-2021-47987"],"ecosystem":"npm","epss":0.0018,"exploited":false,"fixed_versions":["4.5.2","4.10.0"],"ghsa_id":"GHSA-593v-wcqx-hq2w","id":"tcs_01M5KF366CGX8EK1NM56KZ116V","modified_at":"2026-11-02T18:45:04.763134680Z","published_at":"2021-09-07T22:57:58Z","references":["https://osv.dev/vulnerability/GHSA-593v-wcqx-hq2w","https://github.com/parse-community/parse-server/security/advisories/GHSA-593v-wcqx-hq2w","https://github.com/parse-community/parse-server","https://nvd.nist.gov/vuln/detail/CVE-2021-47986","https://nvd.nist.gov/vuln/detail/CVE-2021-47987","https://www.vulncheck.com/advisories/parse-server-arbitrary-code-execution-via-malicious-version-tags","https://www.vulncheck.com/advisories/parse-server-unreviewed-code-execution-via-malicious-version-tags"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-593v-wcqx-hq2w","url":"https://osv.dev/vulnerability/GHSA-593v-wcqx-hq2w"}],"summary":"Incorrect version tags linked to external repository"}