Skip to content

fix: Stored XSS via non-standard file extension bypassing file upload extension blocklist (GHSA-v8x7-r927-cc93)#10505

Merged
mtrezza merged 1 commit into
parse-community:alphafrom
mtrezza:fix/GHSA-v8x7-r927-cc93-v9
Jun 16, 2026
Merged

fix: Stored XSS via non-standard file extension bypassing file upload extension blocklist (GHSA-v8x7-r927-cc93)#10505
mtrezza merged 1 commit into
parse-community:alphafrom
mtrezza:fix/GHSA-v8x7-r927-cc93-v9

fix: GHSA-v8x7-r927-cc93

7885d88
Select commit
Loading
Failed to load commit list.
Sign in for the full log view

Annotations

1 warning
NPM Lock File Version
succeeded Jun 14, 2026 in 4s