Skip to main content

Technology: supabase

IDTitleDescriptionCategoryTechnologyTags
CRE-2025-0130
High
Impact: 9/10
Mitigation: 3/10
Supabase Self-Hosted: Postgres Container Fails to Start Due to Port ConflictDetects when Supabase self-hosted Postgres container fails to start because another service is already using port 5432. This is a common issue during initial setup or when multiple Postgres instances are running on the same host. The failure prevents the entire Supabase stack from starting properly.Database ProblemssupabaseSupabasePostgreSQLPort BindingConfigurationStartup FailureSelf-HostedContainer CrashPublic
CRE-2025-0131
High
Impact: 10/10
Mitigation: 4/10
Supabase Self-Hosted: JWT Secret Missing or Invalid ConfigurationDetects when Supabase self-hosted services fail due to missing, empty, or invalid JWT_SECRET configuration. This affects Auth service, REST API, and all authentication-dependent operations. Invalid JWT secrets prevent API token validation and break the entire authentication flow.authenticationsupabaseSupabaseAuthenticationJWTConfigurationSecurityApi KeySelf-HostedPublic
CRE-2025-0132
Medium
Impact: 8/10
Mitigation: 5/10
Supabase Self-Hosted: Database Connection Timeout and Service FailureDetects when Supabase services lose connection to the PostgreSQL database due to timeouts, network issues, or database unavailability. This affects Auth, REST API, Storage, and all database-dependent operations. Occurs during database restarts, network partitions, or when database becomes unresponsive.Database ProblemssupabaseSupabasePostgreSQLConnectionTimeoutNetworkSelf-HostedConnectivityPublic
CRE-2025-0141
High
Impact: 10/10
Mitigation: 7/10
Supabase Self-Hosted: Disk Full During Database Migration OperationsDetects when Supabase PostgreSQL database operations fail due to insufficient disk space during migrations, data imports, or large transactions. This can corrupt the database, leave migrations in inconsistent state, and cause complete service failure requiring manual intervention.StoragesupabaseSupabasePostgreSQLDisk FullStorageMigration FailureWALSelf-HostedCritical FailureData Loss RiskPublic