parse-community/parse-server 5.2.6

on GitHub

5.2.6 (2022-09-20)

Bug Fixes

• session object properties can be updated by foreign user; this fixes a security vulnerability in which a foreign user can write to the session object of another user if the session object ID is known; the fix prevents writing to foreign session objects (GHSA-6w4q-23cf-j9jp) (#8182) (6d0b2f5)