GHSA-792q-q67h-w579
GitHub Security Advisory
Parse Server may crash when uploading file without extension
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
### Impact
Parse Server crashes when uploading a file without extension.
### Patches
A permanent fix has been implemented to prevent the server from crashing.
### Workarounds
There are no known workarounds.
### References
- GitHub security advisory: https://github.com/parse-community/parse-server/security/advisories/GHSA-792q-q67h-w579
- Patched in Parse Server 6: https://github.com/parse-community/parse-server/releases/tag/6.3.1
- Patched in Parse Server 5 (LTS): https://github.com/parse-community/parse-server/releases/tag/5.5.6
Affected Packages
npm
parse-server
Affected versions:
1.0.0
(fixed in 5.5.6)
npm
parse-server
Affected versions:
6.0.0
(fixed in 6.3.1)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: September 14, 2025 6:31 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.