Supabase Realtime
2 CVEs affecting Supabase Realtime. Latest disclosed: 2026-10-22. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-62247 | Medium | 6.5 | 2026-09-21 | Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets. Prior to 2.111.2, Realtime authorization does not correctly honor the per-… |
CVE-2026-54238 | Low | 3.1 | 2026-10-22 | Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets. Prior to version 2.103.1, the REST broadcast endpoints accept an expired J… |