/
affected_products:Lovable × limpar

Resultados

2 casos · pág. 1/1

welivesecurity.com · low

Vibe-coded apps expose users to hardcoded secrets, weak access controls and prompt injection; Lovable-hosted app had 16 flaws

AI-assisted "vibe coding" is lowering the barrier to app development, but it is also producing apps with common security oversights that app marketplaces do not necessarily flag. The article cites a report that 84% of developers were using or planning to use AI tools, and a Lovable-hosted app in which a researcher found 16 vulnerabilities…

yokai.hakaisecurity.io · high

Chupabase tool exploits misconfigured Supabase RLS in Lovable-generated apps to extract data without authentication

Hakai Security released Chupabase, a Python tool that finds and demonstrates insecure Supabase backend configurations in applications generated by the vibe coding platform Lovable. It parses the app's JavaScript bundles (and the sw.js Service Worker precache manifest) to recover the Supabase URL, the public anonKey and the API endpoint ma…