Known Vulnerabilities for Supabase-MCP by NightTrek
Listed below are 10 of the newest known vulnerabilities associated with "Supabase-MCP" by "NightTrek".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-77071 json | n8n before 1.123.69, 2.33.4, and 2.34.1 contains a PostgREST filter injection vulnerability in the Supabase node's Row Get Ma... | Not Provided | 2026-08-20 | 2026-08-21 |
| CVE-2026-56339 json | Capgo (Cap-go/capgo) before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST SECURITY DEFI... | Not Provided | 2026-07-15 | 2026-07-15 |
| CVE-2026-56321 json | Capgo (backend Supabase edge functions) before 12.128.2 does not apply the global authentication middleware to the GET /priva... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-56311 json | Capgo before 12.128.2 contains an authorization bypass vulnerability in the public.get_current_plan_max_org RPC function that... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-56284 json | Capgo (Cap-go/capgo) before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST RPC function ... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-56248 json | Cap-go capgo (capgo-backend) before 12.128.12 contains an unauthenticated denial-of-service vulnerability arising from the au... | Not Provided | 2026-06-23 | 2026-06-23 |
| CVE-2026-56245 json | Supabase Capgo before 12.128.2 contains an authorization bypass vulnerability in the SECURITY DEFINER record_build_time RPC f... | Not Provided | 2026-06-24 | 2026-06-24 |
| CVE-2026-56244 json | Capgo before 12.128.2 allows non-admin API keys to read webhook signing secrets via Supabase REST due to insufficient row-lev... | Not Provided | 2026-06-24 | 2026-06-24 |
| CVE-2026-56239 json | Capgo before 12.128.2 contains a potential privilege escalation vulnerability in the public.apply_usage_overage SECURITY DEFI... | Not Provided | 2026-06-21 | 2026-06-24 |
| CVE-2026-56238 json | Capgo before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST global_stats endpoint that a... | Not Provided | 2026-07-12 | 2026-07-13 |