SupabaseS
Supabase3w ago
Turf

React CVE

https://www.wiz.io/blog/critical-vulnerability-in-react-cve-2025-55182

The Supabase dashboard uses Next.js. When self-hosting, is it safe because it is behind a login?

I know best practice would be to not even run the dashboard in production but that's not always what people want to do.
wiz.io
React and Next.js are exposed to critical unauthenticated RCE via CVE-2025-55182 and CVE-2025-66478. Learn which versions are impacted and how to mitigate.
Was this page helpful?