Skip to content

fix: Denial of service via exponential-time processing of deeply nested query operators (GHSA-cgxm-vr2f-6fj8)#10511

Merged
mtrezza merged 2 commits into
parse-community:alphafrom
mtrezza:fix/GHSA-cgxm-vr2f-6fj8-v9
Jun 17, 2026
Merged

fix: Denial of service via exponential-time processing of deeply nested query operators (GHSA-cgxm-vr2f-6fj8)#10511
mtrezza merged 2 commits into
parse-community:alphafrom
mtrezza:fix/GHSA-cgxm-vr2f-6fj8-v9

test: cover LiveQuery query depth guard branches

d4050ee
Select commit
Loading
Failed to load commit list.
Codecov / codecov/project succeeded Jun 16, 2026 in 1s

92.65% (+0.03%) compared to be12a60

View this Pull Request on Codecov

92.65% (+0.03%) compared to be12a60

Details

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.65%. Comparing base (be12a60) to head (d4050ee).
⚠️ Report is 1 commits behind head on alpha.

Additional details and impacted files
@@            Coverage Diff             @@
##            alpha   #10511      +/-   ##
==========================================
+ Coverage   92.62%   92.65%   +0.03%     
==========================================
  Files         193      193              
  Lines       16954    16961       +7     
  Branches      240      242       +2     
==========================================
+ Hits        15703    15715      +12     
+ Misses       1228     1225       -3     
+ Partials       23       21       -2     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.