HIGHnpm
GHSA-3534-xp88-25rc· CVE-2026-27609Parse Dashboard is Missing CSRF Protection for its Agent Endpoint
Modified: 2/25/2026
package
pkg:npm/parse-dashboard
Parse Dashboard is Missing CSRF Protection for its Agent Endpoint
Modified: 2/25/2026
Parse Dashboard is Missing Authorization for its Agent Endpoint
Modified: 2/25/2026
Parse Dashboard Has a Cache Key Collision that Leaks Master Key to Read-Only Sessions
Modified: 2/25/2026
Parse Dashboard has incomplete authentication on AI Agent endpoint
Modified: 2/25/2026