Releases · parse-community/parse-server · GitHub

19 Jun 00:15

parseplatformorg

9.9.1-alpha.13 Pre-release

Pre-release

9.9.1-alpha.13 (2026-06-19)

Bug Fixes

LiveQuery discloses object data to a subscriber across an ACL read-access change (GHSA-97pr-9hgg-3p8r) (#10515) (e9c85df)

Assets 2

19 Jun 00:15

parseplatformorg

8.6.83 Latest

Latest

8.6.83 (2026-06-19)

Bug Fixes

LiveQuery discloses object data to a subscriber across an ACL read-access change (GHSA-97pr-9hgg-3p8r) (#10516) (c9b24ce)

Assets 2

17 Jun 14:22

parseplatformorg

9.9.1-alpha.12 Pre-release

Pre-release

9.9.1-alpha.12 (2026-06-17)

Bug Fixes

Denial of service via exponential-time processing of deeply nested query operators (GHSA-cgxm-vr2f-6fj8) (#10511) (1103c7a)

Assets 2

17 Jun 14:23

parseplatformorg

8.6.82

8.6.82 (2026-06-17)

Bug Fixes

Denial of service via exponential-time processing of deeply nested query operators (GHSA-cgxm-vr2f-6fj8) (#10512) (0f5d2ad)

Assets 2

16 Jun 00:43

parseplatformorg

9.9.1-alpha.11 Pre-release

Pre-release

9.9.1-alpha.11 (2026-06-16)

Bug Fixes

Stored XSS via non-standard file extension bypassing file upload extension blocklist (GHSA-v8x7-r927-cc93) (#10505) (be12a60)

Assets 2

16 Jun 00:44

parseplatformorg

8.6.81

8.6.81 (2026-06-16)

Bug Fixes

Stored XSS via non-standard file extension bypassing file upload extension blocklist (GHSA-v8x7-r927-cc93) (#10506) (97c6a78)

Assets 2

12 Jun 11:04

parseplatformorg

9.9.1-alpha.10 Pre-release

Pre-release

9.9.1-alpha.10 (2026-06-12)

Bug Fixes

Middleware route checks do not match routing-equivalent path variants (trailing slash, case) (#10501) (f861210)

Assets 2

11 Jun 01:12

parseplatformorg

9.9.1-alpha.9 Pre-release

Pre-release

9.9.1-alpha.9 (2026-06-11)

Bug Fixes

rateLimit on exact static routes is bypassed by appending a query string (#10500) (880e8e6)

Assets 2

10 Jun 23:49

parseplatformorg

9.9.1-alpha.8 Pre-release

Pre-release

9.9.1-alpha.8 (2026-06-10)

Bug Fixes

LiveQuery subscriptions leak when a client reuses a subscribe requestId (#10499) (3fad4fb)

Assets 2

06 Jun 00:45

parseplatformorg

9.9.1-alpha.7 Pre-release

Pre-release

9.9.1-alpha.7 (2026-06-06)

Bug Fixes

Cloud Function multipart requests bypass the maxUploadSize limit (#10498) (f12e1c3)

Assets 2