CVE-2025-62374: Parse Javascript SDK vulnerable to prototype pollution in `Parse.Object` and internal APIs
Prototype pollution capabilities on various APIs.
References
- github.com/advisories/GHSA-9f2h-7v79-mxw3
- github.com/parse-community/Parse-SDK-JS
- github.com/parse-community/Parse-SDK-JS/commit/00973987f361368659c0c4dbf669f3897520b132
- github.com/parse-community/Parse-SDK-JS/pull/2749
- github.com/parse-community/Parse-SDK-JS/releases/tag/7.0.0-alpha.1
- github.com/parse-community/Parse-SDK-JS/security/advisories/GHSA-9f2h-7v79-mxw3
- nvd.nist.gov/vuln/detail/CVE-2025-62374
Code Behaviors & Features
Detect and mitigate CVE-2025-62374 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →