supabase
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritytemplates/rls-policy-template.sql
MEDIUMSecurityMEDIUM
templates/rls-policy-template.sql
No evidence of malicious code execution, exfiltration, backdoors, or obfuscation is present; this is RLS policy SQL. However, the authorization controls include two major permissiveness hazards: an INSERT policy that effectively allows any authenticated user to insert arbitrary rows (WITH CHECK true under role authenticated), and a public read policy that allows unrestricted SELECT to anon/authenticated (USING true). These issues can lead to severe confidentiality and integrity impact if the table contains sensitive or tenant-scoped data or if the template is applied broadly.
Confidence: 70%Severity: 82%
Audit Metadata