Skip to content

4.10.16
Compare
Choose a tag to compare
@parseplatformorg parseplatformorg released this 20 Sep 20:57
· 8 commits to release-4.x.x since this release
4.10.16
f03bf00

4.10.16 (2022-09-20)

Bug Fixes

  • authentication adapter app ID validation may be circumvented; this fixes a vulnerability that affects configurations which allow users to authenticate using the Parse Server authentication adapter for Facebook or Spotify and where the server-side authentication adapter configuration appIds is set as a string (e.g. abc) instead of an array of strings (e.g. ["abc"]) (GHSA-r657-33vp-gp22) (#8186) (b3e7939)
Assets 2
Loading