Skip to content

fix: Stored XSS via non-standard file extension bypassing file upload extension blocklist (GHSA-v8x7-r927-cc93)#10505

Merged
mtrezza merged 1 commit into
parse-community:alphafrom
mtrezza:fix/GHSA-v8x7-r927-cc93-v9
Jun 16, 2026
Merged

fix: Stored XSS via non-standard file extension bypassing file upload extension blocklist (GHSA-v8x7-r927-cc93)#10505
mtrezza merged 1 commit into
parse-community:alphafrom
mtrezza:fix/GHSA-v8x7-r927-cc93-v9

Commits

Commits on Jun 14, 2026