Skip to content

fix: Endpoints /login and /verifyPassword disclose MFA secrets and protected fields when _User get is denied (GHSA-75v4-m273-5j49)#10492

Merged
mtrezza merged 2 commits into
parse-community:alphafrom
mtrezza:fix/GHSA-75v4-m273-5j49-v9
Jun 3, 2026
Merged

fix: Endpoints /login and /verifyPassword disclose MFA secrets and protected fields when _User get is denied (GHSA-75v4-m273-5j49)#10492
mtrezza merged 2 commits into
parse-community:alphafrom
mtrezza:fix/GHSA-75v4-m273-5j49-v9

Commits

Commits on Jun 2, 2026