https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 05:05:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-60688 EUVD-2026-60688 https://cve.radiocsirt.org/vuln/euvd-2026-60688 https://cve.radiocsirt.org/vuln/fkie_cve-2019-1020013 <p>parse-server before 3.6.0 allows account enumeration.</p> <p>parse-server before 3.6.0 allows account enumeration.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-1020013 https://cve.radiocsirt.org/vuln/ghsa-8w3j-g983-8jh5 <p><strong>Affected:</strong> npm: parse-server</p> <p>Versions of parse-server prior to 3.6.0 could allow an account enumeration attack via account linking. `ParseError.ACCOUNT_ALREADY_LINKED(208)` was thrown BEFORE the AuthController checks the password and throws a `ParseError.SESSION_MISSING(206)` for Insufficient auth. An attacker can guess ids and get information about linked accounts/email addresses.</p> <p>### For more information If you have any questions or comments about this advisory, Open an issue in the [parse-server](https://github.com/parse-community/parse-server) [Parse Community Vulnerability Disclosure Program](https://github.com/parse-community/parse-server/blob/master/SECURITY.md)</p> <p><strong>Affected:</strong> npm: parse-server</p> <p>Versions of parse-server prior to 3.6.0 could allow an account enumeration attack via account linking. `ParseError.ACCOUNT_ALREADY_LINKED(208)` was thrown BEFORE the AuthController checks the password and throws a `ParseError.SESSION_MISSING(206)` for Insufficient auth. An attacker can guess ids and get information about linked accounts/email addresses.</p> <p>### For more information If you have any questions or comments about this advisory, Open an issue in the [parse-server](https://github.com/parse-community/parse-server) [Parse Community Vulnerability Disclosure Program](https://github.com/parse-community/parse-server/blob/master/SECURITY.md)</p> https://cve.radiocsirt.org/vuln/ghsa-8w3j-g983-8jh5 https://cve.radiocsirt.org/vuln/gsd-2019-1020013 gsd-2019-1020013 https://cve.radiocsirt.org/vuln/gsd-2019-1020013