// SupabaseHIGH
CVE-2025-48757 documents widespread Row Level Security misconfiguration in Supabase projects created by Lovable. A scan of 1,645 live projects found 170+ (approximately 1 in 10) had RLS disabled, exposing user data. The vulnerability scored 9.3 on the CVSS scale. Additionally, an April 2026 Lovable incident exposed users' project source code, database credentials, and chat history due to similar authorization flaws.
// Get alerts for Supabase