Skip to content

fix: Endpoints /login and /verifyPassword disclose MFA secrets and protected fields when _User get is denied (GHSA-75v4-m273-5j49)#10492

Merged
mtrezza merged 2 commits into
parse-community:alphafrom
mtrezza:fix/GHSA-75v4-m273-5j49-v9
Jun 3, 2026
Merged

fix: Endpoints /login and /verifyPassword disclose MFA secrets and protected fields when _User get is denied (GHSA-75v4-m273-5j49)#10492
mtrezza merged 2 commits into
parse-community:alphafrom
mtrezza:fix/GHSA-75v4-m273-5j49-v9

fix: GHSA-75v4-m273-5j49

a4a8d34
Select commit
Loading
Failed to load commit list.
Sign in for the full log view

Annotations

1 warning
Benchmarks
succeeded Jun 2, 2026 in 17m 36s