Skip to content

6.0.0-alpha.18

Pre-release
Pre-release
Compare
Choose a tag to compare
@parseplatformorg parseplatformorg released this 05 Jan 13:35
· 630 commits to alpha since this release

6.0.0-alpha.18 (2023-01-05)

Bug Fixes

  • The client IP address may be determined incorrectly in some cases; this fixes a security vulnerability in which the Parse Server option masterKeyIps may be circumvented, see GHSA-vm5r-c87r-pf6x (#8372) (892040d)

BREAKING CHANGES

  • The mechanism to determine the client IP address has been rewritten; to correctly determine the IP address it is now required to set the Parse Server option trustProxy accordingly if Parse Server runs behind a proxy server, see the express framework's trust proxy setting (#8372) (892040d)