Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-mxhg-rvwx-x993

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-mxhg-rvwx-x993

Invalid push request payload crashes Parse Server ### Impact The Parse Server Push Adapter can crash Parse Server due to an invalid push notification payload. ### Patches Invalid push notification payload is caught and an logged. ### Workarounds n/a ### References - https://github.com/parse-community/parse-server-push-adapter/security/advisories/GHSA-mxhg-rvwx-x993 - https://github.com/parse-community/parse-server-push-adapter/pull/217

gitlab/npm/@parse/push-adapter/CVE-2023-32688

Improper Input Validation parse-server-push-adapter is the official Push Notification adapter for Parse Server. The Parse Server Push Adapter can crash Parse Server due to an invalid push notification payload. This issue has been patched in version 4.1.3.

gitlab/npm/parse-server-push-adapter/GMS-2023-1616

Invalid push request payload crashes Parse Server ### Impact The Parse Server Push Adapter can crash Parse Server due to an invalid push notification payload.