Skip to content

fix: Stored XSS via malformed Content-Type bypassing file upload extension blocklist (GHSA-r899-h629-j84r)#10521

Merged
mtrezza merged 3 commits into
parse-community:alphafrom
mtrezza:fix/GHSA-r899-h629-j84r-v9
Jun 25, 2026
Merged

fix: Stored XSS via malformed Content-Type bypassing file upload extension blocklist (GHSA-r899-h629-j84r)#10521
mtrezza merged 3 commits into
parse-community:alphafrom
mtrezza:fix/GHSA-r899-h629-j84r-v9