A vulnerability, which was classified as problematic, has been found in parse-server. This affects an unknown function of the component Deep Copy. Performing a manipulation results in improperly controlled modification of object prototype attributes.
This vulnerability was named CVE-2026-32878. The attack may be initiated remotely. There is no available exploit.
It is advisable to upgrade the affected component.
