Report a Vulnerability

Please do not post a security vulnerability on GitHub or in the Parse Community Forum.

Instead, use this form. This helps us to fix a security issue and release an update before the issue becomes publicly known. This allows other developers to secure their deployment by simply updating to our new release when the security issue will be published publicly.

If you have already posted about this security issue on GitHub, please go back, delete the comment and provide all information via this form.

For more information see our Parse Community Vulnerability Disclosure Program.

Name

This name will be mentioned to thank you in the vulnerability report.

GitHub Username

We will invite you to join our private security advisory discussion on GitHub where you can follow the progress of fixing this issue.

Email

Just in case we need to get in touch with you for more details. Your email address will only be used in regard to this vulnerability report.

Repository*

The repository for which you want to report a vulnerability. If the repository is not listed, it may be a 3rd party repository that is not managed by Parse Platform. In that case you can report the issue directly to the 3rd party, or report it using this form and we will do our best to triage and relay your report to the 3rd party.

Version*

Provide the exact version, don't write "latest".

Parse Server Version*

Provide the exact version, don't write "latest".

Title*

A short title that summarizes the vulnerability in few words.

Description*

Describe the issue in detail.

Code Example

Provide a code example that helps us to reproduce the issue.

Workaround

Describe a workaround to fix the issue if you know if any.

File Upload

Provide any additional files like screenshots if necessary.