parse-community/parse-server 5.4.1

on GitHub

5.4.1 (2023-01-31)

Bug Fixes

• The client IP address may be determined incorrectly in some cases; it is now required to set the Parse Server option trustProxy accordingly if Parse Server runs behind a proxy server, see the express framework's trust proxy setting; this fixes a security vulnerability in which the Parse Server option masterKeyIps may be circumvented, see GHSA-vm5r-c87r-pf6x (#8369) (e016d81)