CVE-2026-32234 | parse-community parse-server up to 8.6.35/9.0.0 9.6.0-alpha.9 regex sql injection

A vulnerability, which was classified as critical, was found in parse-community parse-server up to 8.6.35/9.0.0 9.6.0-alpha.9. This vulnerability affects unknown code. The manipulation of the argument regex results in sql injection.

This vulnerability is reported as CVE-2026-32234. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.