All issues

Search results

masterKeyIps never validates the CIDR mask

Status: Open.

#10640 In parse-community/parse-server;

· AdrianCurtin opened on Aug 19, 2026

allowCustomObjectId accepts an operation as objectId and creates an unreachable user

Status: Open.

#10639 In parse-community/parse-server;

· AdrianCurtin opened on Aug 19, 2026

Malformed ACL on signup answers 500, or a 400 that still persists the user

Status: Open.

#10638 In parse-community/parse-server;

· AdrianCurtin opened on Aug 19, 2026

Relation query with a null operand throws an uncaught TypeError (500)

Status: Open.

#10637 In parse-community/parse-server;

· AdrianCurtin opened on Aug 19, 2026

Verification and password reset emails are dispatched without a rejection handler, producing unhandled rejections

Status: Open.

#10636 In parse-community/parse-server;

· AdrianCurtin opened on Aug 14, 2026

RedisCacheAdapter put, del and clear reject on a Redis outage, producing unhandled rejections

Status: Open.

#10634 In parse-community/parse-server;

· AdrianCurtin opened on Aug 14, 2026

Documentation for directAccess states the default is false, but it has defaulted to true since Parse Server 6

Status: Open.

#10631 In parse-community/parse-server;

· AdrianCurtin opened on Aug 13, 2026

Per-entry cache TTL is silently ignored by the in-memory cache adapter

Status: Open.

#10630 In parse-community/parse-server;

· AdrianCurtin opened on Aug 13, 2026

LiveQuery role cache is not invalidated for all users affected by a role write or delete

Status: Open.

#10628 In parse-community/parse-server;

· AdrianCurtin opened on Aug 13, 2026

/installations and /audiences reject a find sent as POST + _method=GET with "Invalid key name: 0"

Status: Open.

#10626 In parse-community/parse-server;

· AdrianCurtin opened on Aug 13, 2026

Rate limit Redis keys are not scoped to the configured route

type:bugImpaired feature or lacking behavior that is likely assumedImpaired feature or lacking behavior that is likely assumed

Status: Open.

#10624 In parse-community/parse-server;

· SebC99 opened on Aug 11, 2026

Deleting a _Role does not clear the role cache, so revoked roles stay active for the cache TTL

Status: Open.

#10619 In parse-community/parse-server;

· AdrianCurtin opened on Aug 1, 2026