Writing
RSS feed2026
2 articlesForging service_role From an Anon Key: Chaining Two Supabase Bugs Into a CVSS 10.0 RLS Bypass
While building a Supabase security scanner, I found two bugs that chain together to escalate a public anon key into service_role access on older Supabase Cloud projects.
Three Unauthenticated Ways to Introspect a Supabase Database Schema
Supabase exposes database schema information through three different mechanisms: OpenAPI, schema_cache, and GraphQL introspection. Here's how each one works.