Skip to content

fix: Stored XSS via malformed Content-Type bypassing file upload extension blocklist (GHSA-r899-h629-j84r)#10523

Merged
mtrezza merged 2 commits into
parse-community:release-8.x.xfrom
mtrezza:fix/GHSA-r899-h629-j84r-v8
Jun 25, 2026
Merged

fix: Stored XSS via malformed Content-Type bypassing file upload extension blocklist (GHSA-r899-h629-j84r)#10523
mtrezza merged 2 commits into
parse-community:release-8.x.xfrom
mtrezza:fix/GHSA-r899-h629-j84r-v8

Commits

Commits on Jun 24, 2026