CVE-2023-32688

parse-server-push-adapter is the official Push Notification adapter for Parse Server. The Parse Server Push Adapter can crash Parse Server due to an invalid push notification payload. This issue has been patched in version 4.1.3.

• CWE-20
• CWE-20

• https://github.com/parse-community/parse-server-push-adapter/pull/217Patch
• https://github.com/parse-community/parse-server-push-adapter/releases/tag/4.1.3Release Notes
• https://github.com/parse-community/parse-server-push-adapter/security/advisories/GHSA-mxhg-rvwx-x993Patch, Vendor Advisory
• https://github.com/parse-community/parse-server-push-adapter/pull/217Patch
• https://github.com/parse-community/parse-server-push-adapter/releases/tag/4.1.3Release Notes
• https://github.com/parse-community/parse-server-push-adapter/security/advisories/GHSA-mxhg-rvwx-x993Patch, Vendor Advisory

Published

May 27, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-32682Synapse is a Matrix protocol homeserver written in Python wi…5.4
• CVE-2023-32683Synapse is a Matrix protocol homeserver written in Python wi…5.4
• CVE-2023-32684Lima launches Linux virtual machines, typically on macOS, fo…2.5
• CVE-2023-32685Kanboard is project management software that focuses on the …5.4
• CVE-2023-32686Kiwi TCMS is an open source test management system for both …5.4
• CVE-2023-32687tgstation-server is a toolset to manage production BYOND ser…6.5
• CVE-2023-32689Parse Server is an open source backend that can be deployed …6.5
• CVE-2023-3269A vulnerability exists in the memory management subsystem of…7.8
• CVE-2023-32690libspdm is a sample implementation that follows the DMTF SPD…7.5
• CVE-2023-32691gost (GO Simple Tunnel) is a simple tunnel written in golang…5.9
• CVE-2023-32692CodeIgniter is a PHP full-stack web framework. This vulnerab…9.8
• CVE-2023-32693Decidim is a participatory democracy framework, written in R…6.1