Co se stalo
UpGuard published a study on September 25, 2026, identifying 16,326 databases hosted on the Supabase platform that expose readable tables to the public web. The study was written by Greg Pollock, UpGuard's Director of Research and Insights. The researchers found that more than half of the exposed databases showed indicators of personally identifiable information, a smaller percentage included passwords or authentication tokens, and a very small number contained plausible credit card data.
The study identified 16,326 databases hosted on Supabase that expose readable tables to the public web. More than half of the exposed databases showed indicators of personally identifiable information. A smaller percentage included passwords or authentication tokens. A very small number contained plausible credit card data. The researchers found that sites using Supabase can be fingerprinted by looking for Supabase key names and database addresses in public JavaScript files.
Podrobnosti o zdroji: unite.ai ↗
Proč na tom záleží
The study highlights the importance of proper security configuration in preventing data leaks. Supabase has become a core component of web applications built through AI-assisted 'vibe coding.' The researchers found that sites using Supabase can be fingerprinted by looking for Supabase key names and database addresses in public JavaScript files. The study also notes that data leaks are the multiplicative product of a technology's ease of misconfiguration and the size of its user base.
The study highlights the importance of proper security configuration in preventing data leaks. Supabase has become a core component of web applications built through AI-assisted 'vibe coding.' The researchers found that data leaks are the multiplicative product of a technology's ease of misconfiguration and the size of its user base. The study notes that data leaks are not limited to one region, but are happening worldwide. The severity of data leaks is not uniform, with Europe's data protection laws driving better practices and developing regions having more data leaks.
Interaktivní mechanismus: Jak to vlastně funguje
Interaktivně prozkoumejte základní technologii tohoto vývoje.
A route planner searches possible journeys using explicit rules. What does this illustrate about AI?
Na co se dále dívat
The study's findings suggest that proper security configuration is crucial in preventing data leaks. Developers and users should be aware of the potential risks associated with misconfigured databases and take steps to secure their data.
Developers and users should be aware of the potential risks associated with misconfigured databases. Proper security configuration is crucial in preventing data leaks. The study's findings suggest that data leaks are a significant concern in the tech industry. The study notes that data leaks can have severe consequences, including financial losses and reputational damage. The study's recommendations for preventing data leaks include implementing row-level security and using credentials correctly.