Skip to content

Add parse-server LiveQuery ACL advisory references#8254

Open
cookesan wants to merge 2 commits into
github:cookesan/advisory-improvement-8254from
cookesan:parse-server-97pr-fix-references
Open

Add parse-server LiveQuery ACL advisory references#8254
cookesan wants to merge 2 commits into
github:cookesan/advisory-improvement-8254from
cookesan:parse-server-97pr-fix-references

Conversation

@cookesan

@cookesan cookesan commented Jun 29, 2026

Copy link
Copy Markdown

Adds direct commit and release references for GHSA-97pr-9hgg-3p8r in both Parse Server release lines. The advisory already references upstream PR #10515 and PR #10516 plus package source; this PR links each merged fix to its fixed release.

Current audit, July 8, 2026:

  • GHSA-97pr-9hgg-3p8r is live, not withdrawn, and has no CVE identifier.
  • PR #10515 merged to alpha as commit e9c85dfe40a866a55ebae3b6ae56285ac0a22e64; release 9.9.1-alpha.13 is published, marked prerelease, and not marked draft.
  • PR #10516 merged to release-8.x.x as commit c9b24cecfee76d8563019adaacbcbd78471dc41e; release 8.6.83 is published and not marked draft or prerelease.
  • npm parse-server 9.9.1-alpha.13 and 8.6.83 both resolve with package tarball and integrity metadata.
  • Local JSON validation and whitespace checks pass, and the diff only changes this advisory.

@github-actions github-actions Bot changed the base branch from main to cookesan/advisory-improvement-8254 June 29, 2026 08:18
@cookesan

cookesan commented Jul 7, 2026

Copy link
Copy Markdown
Author

Rechecked this reference-only PR while keeping the open Advisory Database queue current.

Adds direct commit and release references for GHSA-97pr-9hgg-3p8r in both Parse Server release lines. The advisory already references upstream PR #10515 and PR #10516 plus package source; this PR links each merged fix to its fixed release.

Current audit, July 8, 2026:

  • GHSA-97pr-9hgg-3p8r is live, not withdrawn, and has no CVE identifier.
  • PR #10515 merged to alpha as commit e9c85dfe40a866a55ebae3b6ae56285ac0a22e64; release 9.9.1-alpha.13 is published, marked prerelease, and not marked draft.
  • PR #10516 merged to release-8.x.x as commit c9b24cecfee76d8563019adaacbcbd78471dc41e; release 8.6.83 is published and not marked draft or prerelease.
  • npm parse-server 9.9.1-alpha.13 and 8.6.83 both resolve with package tarball and integrity metadata.
  • Local JSON validation and whitespace checks pass, and the diff only changes this advisory.

No advisory data fields are changed.

@cookesan cookesan changed the title Add parse-server LiveQuery ACL fix commit references Add parse-server LiveQuery ACL advisory references Jul 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant