Unauthenticated Supabase PostgREST exposes global_stats financial KPIs

github.com 2026-07-12查看中文 →

Security AdvisoryHighSupabase

Affected:

Supabase PostgREST < 12.128.2

Fixed in:

12.128.2

Referenced CVEs: CVE-2026-56238 · 7.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Reflected XSS in lunt ClientMessageController (CVE-2026-51025) 2026-07-21 ClearanceKit Signed Policy Table Replay Attack Vulnerability 2026-07-21 CVE-2025-47134: ClearanceKit Permissive ACL on System Keychain Policy Signing Key 2026-07-21 BOLA in MCP Campaign Tools with POC: Cross-User Data Access & Tampering 2026-07-21 MCP Product Tool RBAC Bypass Vulnerability (CVSS 7.1) and Exploit PoC 2026-07-21

Offline Archive

Offline screenshot & PDF are Pro-exclusive