parse-server

v9.9.0npm· JavaScript

An express module providing a Parse-compatible API server

The verdict

Has 2 high-severity advisories. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceHealthy

PopularityUnknown

Security2 advisories

LicensePermissive

DepsHeavy

Maintenance

Last published 1 month ago.

Popularity

Download count unavailable.

Security

2 known advisories (worst: high severity).

License

Apache-2.0

Dependencies

41 direct dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
Parse Server: Pre-authentication denial of service via client version header regex backtracking
GHSA-38m6-82c8-4xfm Fixed in 9.9.1-alpha.1Published 2026-05-23
MEDIUM
Parse Server's GraphQL "Did you mean ...?" validation suggestions disclose schema to unauthenticated callers
GHSA-8cph-rgr4-g5vj Fixed in 9.9.1-alpha.2Published 2026-05-29

Recent releases