supabase

Products

Exploited and recent CVEs

• CVE-2026-54238 Low 3.1 Supabase Realtime: Expired JWTs with string exp are accepted by REST broadcast authorization 0.2%
• CVE-2026-62247 Medium 6.5 Supabase Realtime: Incorrect Authorization 0.5%
• CVE-2026-31813 Medium 4.8 Supabase Auth has insecure Apple and Azure authentication with ID tokens 0.2%
• CVE-2025-48370 Low 2.7 auth-js Vulnerable to Insecure Path Routing from Malformed User Input 0.9%