[Snyk] Security upgrade parse-server from 2.3.2 to 4.10.10

[ninadhatkar]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • appengine/parse-server/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Authentication Bypass SNYK-JS-PARSESERVER-2806358	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: parse-server

The new version differs by 250 commits.

• b00b041 chore(release): 4.10.10 [skip ci]
• 1930a64 fix: authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter (GHSA-qf8x-vqjv-92gr) (#7963)
• cd354b7 chore(release): 4.10.9 [skip ci]
• 3d80ee5 fix: security upgrade @ parse/push-adapter from 3.4.1 to 4.1.2 (#7897)
• bf88869 chore(release): 4.10.8 [skip ci]
• d347613 fix: sensitive keyword detection may produce false positives (#7883)
• 02f88f4 docs: add details to changelog (#7842)
• 7c84477 chore(release): 4.10.7 [skip ci]
• 886bfd7 fix: security vulnerability that allows remote code execution (ghsa p6h4 93qp jhcm) (#7841)
• 318c203 ci: fix changelog file path (#7835)
• 6f25ea9 ci: add manual docker release workflow (#7809)
• cd41626 chore(release): 4.10.6 [skip ci]
• 350ecde fix: update graphql dependencies to work with Parse Dashboard (#7658)
• b465f7b chore(release): 4.10.5 [skip ci]
• d7f2bb4 ci: disable auto-release dry-run
• 4bd1308 docs: fix changelog typo
• 611332e fix: security upgrade follow-redirects from 1.13.0 to 1.14.8 (#7803)
• 65c13fe ci: fix release automation workflow typo
• adf7d92 ci: add release automation (#7807)
• 065facd test: fix failing tests on 4.x LTS branch (#7661)
• 4ac4b7f Merge pull request from GHSA-7pr3-p5fm-8r9x
• 6683cd9 fix docker run (#7557)
• ef2ec21 ci: update docker image building (#7553)
• c71ae7d chore(release): 4.10.3 (#7538)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.