CVE-2026-33527 | parse-community parse-server up to 8.6.56/9.6.0-alpha.47 REST API authorization (GHSA-jc39-686j-wp6q)

A vulnerability identified as problematic has been detected in parse-community parse-server up to 8.6.56/9.6.0-alpha.47. This issue affects some unknown processing of the component REST API. Performing a manipulation results in incorrect authorization.

This vulnerability is identified as CVE-2026-33527. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.