VYPR
← All advisories
High severity7.5NVD Advisory· Published Jun 25, 2026· Updated Jul 30, 2026

CVE-2021-47986

CVE-2021-47986

Description

Parse Server before 4.10.0 contains a supply chain vulnerability where incorrect version tags were pushed to the repository linking to unreviewed code in a personal fork. Attackers could exploit this by specifying affected version tags in dependency declarations to execute unreviewed and potentially malicious code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

32
  • Parse Community/Parse Serverllm-fuzzy
    Range: <4.10.0
  • Parseplatform/Parse Server30 versions
    cpe:2.3:a:parseplatform:parse-server:4.0.0:beta5:*:*:*:node.js:*:*+ 29 more
    • cpe:2.3:a:parseplatform:parse-server:4.0.0:beta5:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.0.4:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.0.6:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.0.7:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.0.8:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.0.0:beta1:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.0.0:beta2:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.0.0:beta3:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.0.0:beta4:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.0.0:beta6:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.0.3:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.0.9:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.0.10:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.0.11:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.8.1:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.8.2:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.8.3:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.8.4:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.8.5:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.9.0:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.9.1:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.0.12:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.0.13:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.0.14:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.6.0:-:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.6.0:beta:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.9.2:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.7.0:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.8.0:*:*:*:*:node.js:*:*
    • cpe:2.3:a:parseplatform:parse-server:4.9.3:*:*:*:*:node.js:*:*
  • osv-coords
    pkg:bitnami/parse
    Range: < 4.10.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.