6.0.0-alpha.18 (2023-01-05)
Bug Fixes
- The client IP address may be determined incorrectly in some cases; this fixes a security vulnerability in which the Parse Server option
masterKeyIps
may be circumvented, see GHSA-vm5r-c87r-pf6x (#8372) (892040d)
BREAKING CHANGES
- The mechanism to determine the client IP address has been rewritten; to correctly determine the IP address it is now required to set the Parse Server option
trustProxy
accordingly if Parse Server runs behind a proxy server, see the express framework's trust proxy setting (#8372) (892040d)