Supabase

3 CVEs across 3 Supabase products. Browse Supabase vulnerabilities, severities, and proof-of-concept exploits.

Supabase products with known CVEs

ProductCVEs
Auth1
Auth-Js1
Postgres1
Supabase CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-31813Medium4.82026-03-11Supabase Auth is a JWT based API for managing users and issuing JWT tokens. Prior to 2.185.0, a vulnerability has been identified that allows an attacker to is…
CVE-2025-483702025-05-27auth-js is an isomorphic Javascript library for Supabase Auth. Prior to version 2.70.0, the library functions getUserById, deleteUser, updateUserById, listFact…
CVE-2024-24213Critical9.82024-02-08Supabase PostgreSQL v15.1 was discovered to contain a SQL injection vulnerability via the component /pg_meta/default/query. NOTE: the vendor's position is that…