// SupabaseMEDIUM
CVE-2026-62247 discovered in Supabase Realtime prior to version 2.111.2. A flaw in authorization logic allows clients with presence.write but explicit presence.read denial to receive presence_diff messages containing other members' presence metadata. The vulnerability has a CVSS score of 6.5 and affects per-extension row-level security policies. Fixed in Realtime 2.111.2.
// Get alerts for Supabase