9.2.0

Breaking Changes

• MongoDB driver upgraded to 7.0.0 — review migration guide for compatibility

Features

• New databaseOptions.clientMetadata config option to send custom metadata to MongoDB for logging/debugging

Fixes

• MongoDB timeout errors no longer leak internal data
• Security patch: @apollo/server 5....

9.2.0-alpha.5 (2026-02-05)

Bug Fixes

• Security upgrade @apollo/server from 5.0.0 to 5.4.0 (#10035) (9f368ff)

9.2.0-alpha.4 (2026-01-29)

Features

• Upgrade mongodb from 6.20.0 to 7.0.0 (#10027) (14b3fce)

9.2.0-alpha.3 (2026-01-27)

Features

• Upgrade to parse 8.0.3 and @parse/push-adapter 8.2.0 (#10021) (9833fdb)

9.2.0-alpha.2 (2026-01-24)

Bug Fixes

• MongoDB timeout errors unhandled and potentially revealing internal data (#10020) (1d3336d)

9.2.0-alpha.1 (2026-01-24)

Features

• Add option databaseOptions.clientMetadata to send custom metadata to database server for logging and debugging (#10017) ([756c204](https://github.com/parse-community/parse-server/commit/756c204220a2c7be3770...

9.1.1 (2025-12-16)

Bug Fixes

• Server-Side Request Forgery (SSRF) in Instagram auth adapter GHSA-3f5f-xgrj-97pf (#9988) ([fbcc938](https://github.com/parse-communi...

9.1.1-alpha.1 (2025-12-16)

Bug Fixes

• Server-Side Request Forgery (SSRF) in Instagram auth adapter GHSA-3f5f-xgrj-97pf (#9988) ([fbcc938](https://github.c...

8.6.2 (2025-12-16)

Bug Fixes

• Server-Side Request Forgery (SSRF) in Instagram auth adapter GHSA-3f5f-xgrj-97pf (#9989) ([155c6ad](https://github.com/parse-communi...

9.1.0 (2025-12-14)

Bug Fixes

• Cross-Site Scripting (XSS) via HTML pages for password reset and email verification GHSA-jhgf-2h8h-ggxv (#9985) ([3074eb7](https://gi...