CVE-2026-30948 | parse-community parse-server up to 8.6.16/9.0.0 9.5.2-alpha.3 SVG File Parser cross site scripting (GHSA-hcj7-6gxh-24ww)

A vulnerability identified as problematic has been detected in parse-community parse-server up to 8.6.16/9.0.0 9.5.2-alpha.3. Affected is an unknown function of the component SVG File Parser. The manipulation leads to cross site scripting.

This vulnerability is documented as CVE-2026-30948. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.