Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: parse-community/parse-server
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 5.2.6
Choose a base ref
...
head repository: parse-community/parse-server
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 5.2.7
Choose a head ref
  • 2 commits
  • 6 files changed
  • 2 contributors

Commits on Sep 20, 2022

  1. fix: authentication adapter app ID validation may be circumvented; th… 

    …is fixes a vulnerability that affects configurations which allow users to authenticate using the Parse Server authentication adapter for *Facebook* or *Spotify* and where the server-side authentication adapter configuration `appIds` is set as a string (e.g. `abc`) instead of an array of strings (e.g. `["abc"]`) ([GHSA-r657-33vp-gp22](GHSA-r657-33vp-gp22)) (#8185)
    @mtrezza
    mtrezza authored Sep 20, 2022
    Configuration menu
    Copy the full SHA
    ecf0814 View commit details
    Browse the repository at this point in the history

  2. chore(release): 5.2.7 [skip ci] 

    ## [5.2.7](5.2.6...5.2.7) (2022-09-20)

### Bug Fixes

* authentication adapter app ID validation may be circumvented; this fixes a vulnerability that affects configurations which allow users to authenticate using the Parse Server authentication adapter for *Facebook* or *Spotify* and where the server-side authentication adapter configuration `appIds` is set as a string (e.g. `abc`) instead of an array of strings (e.g. `["abc"]`) ([GHSA-r657-33vp-gp22](GHSA-r657-33vp-gp22)) ([#8185](#8185)) ([ecf0814](ecf0814))
    @semantic-release-bot
    semantic-release-bot committed Sep 20, 2022
    Configuration menu
    Copy the full SHA
    e6dc487 View commit details
    Browse the repository at this point in the history
Loading