GHSA-3534-xp88-25rc
NoneCVSS
—
EPSS
—
Published
Feb 25, 2026
CISA due date
—
The record
Parse Dashboard is Missing CSRF Protection for its Agent Endpoint
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | parse-dashboard | 7.3.0-alpha.42 | 9.0.0-alpha.8 |
Related vulnerabilities
- CVE-2026-27609 Parse Dashboard is a standalone dashboard for managing Parse Server apps. Same vulnerability
- GHSA-jhp4-jvq3-w5xr Parse Dashboard Has a Cache Key Collision that Leaks Master Key to Read-Only Sessions Also affects parse-dashboard
- GHSA-cvwj-6c9h-jg6v Parse Dashboard is Missing Authorization for its Agent Endpoint Also affects parse-dashboard
- GHSA-qwc3-h9mg-4582 Parse Dashboard has incomplete authentication on AI Agent endpoint Also affects parse-dashboard
- CVE-2026-27610 Parse Dashboard is a standalone dashboard for managing Parse Server apps. Also affects parse-dashboard
- CVE-2026-27595 Parse Dashboard is a standalone dashboard for managing Parse Server apps. Also affects parse-dashboard
- CVE-2026-27608 Parse Dashboard is a standalone dashboard for managing Parse Server apps. Also affects parse-dashboard
- CVE-2026-96388 Cross-Site Request Forgery (CSRF) vulnerability in Drupal Tawk.to - Live chat application… CWE-352