Breach breakdowns
Plain-English breakdowns of real data leaks in AI-built and vibe-coded apps: what happened, the root cause, and how to check your own app. Facts come from the cited reporting; written by Pritesh Ghodge, a security engineer.
- Breakdown: how 170 Lovable apps left their Supabase data open (CVE-2025-48757)
1,645 Lovable Launched sites scanned, 303 endpoints across 170 projects with missing or loose RLS. Why the anon key wasn't the problem, and a one-minute self-check.
Want to know if your app has the same problem? Scan it free, no sign-up. More fixes in the guides.