A vulnerability described as critical has been identified in parse-community parse-server up to 8.6.0-alpha.1. This impacts an unknown function of the component GitHub Action Handler. The manipulation results in code injection.
This vulnerability is known as CVE-2025-67727. It is possible to launch the attack remotely. No exploit is available.
Upgrading the affected component is recommended.