https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T05:48:50.697959+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-14237 bdu:2026-14237 2026-10-13T05:48:50.700883+00:00 bdu:2026-14237 https://cve.radiocsirt.org/vuln/bit-parse-2025-67727 BIT-parse-2025-67727 — Parse Server GitHub CI workflow vulnerable to RCE through Improper Privilege Management 2026-10-13T05:48:50.700911+00:00

Affected: Bitnami: parse

Parse Server is an open source backend that can be deployed to any infrastructure that runs Node.js. In versions prior to 8.6.0, a GitHub CI workflow is triggered in a way that grants the GitHub Actions workflow elevated permissions, giving it access to GitHub secrets and write permissions which are defined in the workflow. Code from a fork or lifecycle scripts is potentially included. Only the repository's CI/CD infrastructure is affected, including any public GitHub forks with GitHub Actions enabled. This issue is fixed version 8.6.0 and commits 6b9f896 and e3d27fe.

 https://cve.radiocsirt.org/vuln/euvd-2026-263479 EUVD-2026-263479 2026-10-13T05:48:50.700946+00:00 EUVD-2026-263479 https://cve.radiocsirt.org/vuln/fkie_cve-2025-67727 fkie_cve-2025-67727 2026-10-13T05:48:50.700959+00:00

Parse Server is an open source backend that can be deployed to any infrastructure that runs Node.js. In versions prior to 8.6.0-alpha.2, a GitHub CI workflow is triggered in a way that grants the GitHub Actions workflow elevated permissions, giving it access to GitHub secrets and write permissions which are defined in the workflow. Code from a fork or lifecycle scripts is potentially included. Only the repository's CI/CD infrastructure is affected, including any public GitHub forks with GitHub Actions enabled. This issue is fixed version 8.6.0-alpha.2 and commits 6b9f896 and e3d27fe.