Vulnerabilities in supabase

4 results

CVE-2025-48370LOWauth-js Vulnerable to Insecure Path Routing from Malformed User InputEPSS 0.9%CVE-2026-62247MEDIUMSupabase Realtime: Incorrect AuthorizationEPSS 0.5%CVE-2026-54238LOWSupabase Realtime: Expired JWTs with string exp are accepted by REST broadcast authorizationEPSS 0.2%CVE-2026-31813MEDIUMSupabase Auth has insecure Apple and Azure authentication with ID tokensEPSS 0.2%