Skip to content

Commit c9333dd

Browse files
chore(release): 7.5.4 [skip ci]
## [7.5.4](7.5.3...7.5.4) (2025-11-05) ### Bug Fixes * Uploading a file by providing an origin URL allows for Server-Side Request Forgery (SSRF); fixes vulnerability [GHSA-x4qj-2f4q-r4rx](GHSA-x4qj-2f4q-r4rx) ([#9904](#9904)) ([8bbe3ef](8bbe3ef))
1 parent 8bbe3ef commit c9333dd

File tree

3 files changed

+10
-3
lines changed

3 files changed

+10
-3
lines changed

changelogs/CHANGELOG_release.md

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,10 @@
1+
## [7.5.4](https://github.com/parse-community/parse-server/compare/7.5.3...7.5.4) (2025-11-05)
2+
3+
4+
### Bug Fixes
5+
6+
* Uploading a file by providing an origin URL allows for Server-Side Request Forgery (SSRF); fixes vulnerability [GHSA-x4qj-2f4q-r4rx](https://github.com/parse-community/parse-server/security/advisories/GHSA-x4qj-2f4q-r4rx) ([#9904](https://github.com/parse-community/parse-server/issues/9904)) ([8bbe3ef](https://github.com/parse-community/parse-server/commit/8bbe3efbcf4a3b66f4a8db9bfb18cd98c050db51))
7+
18
## [7.5.3](https://github.com/parse-community/parse-server/compare/7.5.2...7.5.3) (2025-07-10)
29

310

package-lock.json

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "parse-server",
3-
"version": "7.5.3",
3+
"version": "7.5.4",
44
"description": "An express module providing a Parse-compatible API server",
55
"main": "lib/index.js",
66
"repository": {

0 commit comments

Comments
 (0)