{"action":"Upgrade parse-server to 4.10.4 or later.","affected":[{"fixed":"4.10.4","introduced":"0"}],"component":"parse-server","cve_ids":["CVE-2021-41109"],"ecosystem":"npm","epss":0.01246,"exploited":false,"fixed_versions":["4.10.4"],"ghsa_id":"GHSA-7pr3-p5fm-8r9x","id":"tcs_01M5KFAJSM03MK89BYPT9SNWY1","modified_at":"2026-07-08T06:28:38.905820965Z","published_at":"2021-09-30T17:09:47Z","references":["https://osv.dev/vulnerability/GHSA-7pr3-p5fm-8r9x","https://github.com/parse-community/parse-server/security/advisories/GHSA-7pr3-p5fm-8r9x","https://nvd.nist.gov/vuln/detail/CVE-2021-41109","https://github.com/parse-community/parse-server/commit/4ac4b7f71002ed4fbedbb901db1f6ed1e9ac5559","https://github.com/parse-community/parse-server","https://github.com/parse-community/parse-server/releases/tag/4.10.4"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7pr3-p5fm-8r9x","url":"https://osv.dev/vulnerability/GHSA-7pr3-p5fm-8r9x"}],"summary":"LiveQuery publishes user session tokens in parse-server"}