Parse Server role escalation and CLP bypass via direct `_Join` table write

Parse Server: Account takeover via operator injection in authentication data identifier

Parse Server has a SQL Injection via dot-notation sub-key name in `Increment` operation on PostgreSQL

Parse Server has a SQL injection via `Increment` operation on nested object field in PostgreSQL

Parse Server has a SQL injection via dot-notation field name in PostgreSQL

Parse Server: JWT audience validation bypass in Google, Apple, and Facebook authentication adapters

Parse Server: Cloud function validator bypass via prototype chain traversal

Parse Server: Auth provider validation bypass on login via partial authData

Parse Server: Classes `_GraphQLConfig` and `_Audience` master key bypass via generic class routes

Parse Server session token exfiltration via `redirectClassNameForKey` query parameter