Lovable

Products

ProductCVEsExploitedLatest
Lovable1–May 30, 2025

Exploited and recent CVEs

  • CVE-2025-48757 Critical 9.3 An insufficient database Row-Level Security policy in Lovable through 2025-04-15 allows remote unauthenticated attackers to read or write to arbitrary database tables of generated sites. NOTE: this is 0.8%