6.0.0-alpha.4

6.0.0-alpha.4 (2022-11-10)

Features

• Remove deprecation DEPPS2: Config option directAccess defaults to true (#8284) (f535ee6)

BREAKING CHANGES

• Config option directAccess defaults to true; set this to false in environments where multiple Parse Server instances run behind a load balancer and Parse requests within the current Node.js environment should be routed via the load balancer and distributed as HTTP requests among all instances via the serverURL. (f535ee6)

6.0.0-alpha.3

6.0.0-alpha.3 (2022-11-10)

Features

• Remove deprecation DEPPS4: Remove convenience method for http request Parse.Cloud.httpRequest (#8287) (2d79c08)

BREAKING CHANGES

• The convenience method for HTTP requests Parse.Cloud.httpRequest is removed; use your preferred 3rd party library for making HTTP requests (2d79c08)

6.0.0-alpha.2

6.0.0-alpha.2 (2022-11-10)

Features

• Improve authentication adapter interface to support multi-factor authentication (MFA), authentication challenges, and provide a more powerful interface for writing custom authentication adapters (#8156) (5bbf9ca)

6.0.0-alpha.1

6.0.0-alpha.1 (2022-11-10)

Bug Fixes

• Remove Node 12 and Node 17 support (#8279) (2546cc8)

BREAKING CHANGES

• This release removes Node 12 and Node 17 support (2546cc8)

5.3.3

5.3.3 (2022-11-09)

Bug Fixes

• Prototype pollution via Cloud Code Webhooks; fixes security vulnerability GHSA-93vw-8fm5-p2jf (#8305) (60c5a73)

5.3.2

5.3.2 (2022-11-09)

Bug Fixes

• Parse Server option requestKeywordDenylist can be bypassed via Cloud Code Webhooks or Triggers; fixes security vulnerability GHSA-xprv-wvh7-qqqx (#8302) (6728da1)

4.10.20

4.10.20 (2022-11-09)

Bug Fixes

• Prototype pollution via Cloud Code Webhooks; fixes security vulnerability GHSA-93vw-8fm5-p2jf (#8306) (6c63f04)

4.10.19

4.10.19 (2022-11-09)

Bug Fixes

• Parse Server option requestKeywordDenylist can be bypassed via Cloud Code Webhooks or Triggers; fixes security vulnerability GHSA-xprv-wvh7-qqqx (#8301) (0a2d412)

5.3.1

5.3.1 (2022-11-07)

Bug Fixes

• Remote code execution via MongoDB BSON parser through prototype pollution; fixes security vulnerability GHSA-prm5-8g2m-24gg (#8295) (50eed3c)

4.10.18

4.10.18 (2022-11-07)

Bug Fixes

• Remote code execution via MongoDB BSON parser through prototype pollution; fixes security vulnerability GHSA-prm5-8g2m-24gg (#8296) (47cfeee)