GHSA-qf8x-vqjv-92gr
GitHub Security Advisory
Authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
### Impact
Weak validation of the Apple certificate URL in the Apple Game Center authentication adapter allows to bypass authentication and makes the server vulnerable to DoS attacks.
### Patches
The vulnerability has been fixed by improving the URL validation and adding additional checks of the resource the URL points to before downloading it.
Affected Packages
npm
parse-server
Affected versions:
0
(fixed in 4.10.10)
npm
parse-server
Affected versions:
5.0.0
(fixed in 5.2.1)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: July 9, 2025 6:27 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.