What is GHSA-g938-h978-wf7v?

GHSA-g938-h978-wf7v is a security advisory published by GitHub Security Advisories with High severity. Parse Server before 4.10.0 contains a supply chain vulnerability where incorrect version tags...

Which CVE IDs does GHSA-g938-h978-wf7v cover?

GHSA-g938-h978-wf7v covers the following CVE IDs: CVE-2021-47986. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-g938-h978-wf7v?

GHSA-g938-h978-wf7v has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-g938-h978-wf7vHighCVSS 7.5

Parse Server before 4.10.0 contains a supply chain vulnerability where incorrect version tags...

Vendor

GitHub Security Advisories

Published

June 26, 2026

Last Modified

June 26, 2026

🔗 CVE IDs covered (1)

CVE-2021-47986 →

📋 Description

Parse Server before 4.10.0 contains a supply chain vulnerability where incorrect version tags were pushed to the repository linking to unreviewed code in a personal fork. Attackers could exploit this by specifying affected version tags in dependency declarations to execute unreviewed and potentially malicious code.

🔗 References (4)

https://github.com/parse-community/parse-server/security/advisories/GHSA-593v-wcqx-hq2w
https://nvd.nist.gov/vuln/detail/CVE-2021-47986
https://www.vulncheck.com/advisories/parse-server-unreviewed-code-execution-via-malicious-version-tags
https://github.com/advisories/GHSA-g938-h978-wf7v