CVE-2025-48757

Rls-guard, a new open-source tool, generates and audits Postgres/Supabase row-level security (RLS) policies from a YAML spec, addressing misconfigured RLS that exposed 303 endpoints across 170 apps in…

AI coding assistants like Cursor, v0, Lovable, and Bolt consistently introduce three specific vulnerability classes in generated MVPs: missing ownership checks (BOLA), disabled Supabase Row-Level Secu…

Rlsgate, a new open-source CLI tool, blocks Supabase Row Level Security leaks before deployment by scanning local migrations, policies, and env files for critical vulnerabilities like the CVE-2025-487…