A Vibe-Coded App Can Make Data Public: Supabase Requires GRANT

On Sep 25, collections of user data became public in apps run by some Supabase customers. A misconfiguration in public tables exposes data on the web.