CVE-2021-47986: Parseplatform Parse-Server

High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Parse Server before 4.10.0 contains a supply chain vulnerability where incorrect version tags were pushed to the repository linking to unreviewed code in a personal fork. Attackers could exploit this by specifying affected version tags in dependency declarations to execute unreviewed and potentially malicious code.

Affected products

• Parseplatform Parse-Server: version 4.0.0 only; version 4.0.3 only; version 4.0.4 only; version 4.0.6 only; version 4.0.7 only; version 4.0.8 only; …

Published 2026-06-25. Last modified 2026-07-30.