GHSA-xw6g-jjvf-wwf9
Invalid file request can crash server
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | parse-server | < 4.10.12 | 4.10.12 |
| npm | parse-server | >= 5.0.0, < 5.2.3 | 5.2.3 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
Certain types of invalid files requests are not handled properly and can crash the server. If you are running multiple Parse Server instances in a cluster, the availability impact may be low; if you are running Parse Server as a single instance without redundancy, the availability impact may be high.
### Patches
To prevent this, invalid requests are now properly handled.
### Workarounds
None
### References
- https://github.com/parse-community/parse-server/security/advisories/GHSA-xw6g-jjvf-wwf9
- https://github.com/parse-community/parse-server
### For more information
- For questions or comments about this vulnerability visit our [community forum](http://community.parseplatform.org/) or [community chat](http://chat.parseplatform.org/)
- Report other vulnerabilities at [report.parseplatform.org](https://report.parseplatform.org/)
References
External links from the advisory. They lead to third-party sites.