网络安全公司UpGuard发现，托管在Supabase开发平台上的约16,000个数据库将敏感个人数据暴露在公共网络上。
UpGuard Research Reveals Thousands of Supabase Databases Exposing Sensitive User Data Cybersecurity firm UpGuard discovered approximately 16,000 databases hosted on the Supabase development platform exposing sensitive personal data to the public web.
泄露的数据包括姓名、地址、电话号码和密码，影响多个项目，包括美国的一家代客泊车服务和法国的一家非洲政府领事馆。
The exposed data includes names, addresses, phone numbers, and passwords, affecting various projects including a U.S. valet service and an African government consulate in France.
该研究强调了“氛围编程”（vibe-coding）和AI生成应用的风险，开发人员可能错误配置安全设置。
The research highlights the risks of 'vibe-coding' and AI-generated apps, where developers may misconfigure security settings.
Supabase首席信息安全官Bil Harmer表示，公司的项目“默认安全”，安全是平台及其客户的共同责任。
Supabase CISO Bil Harmer stated that the company's projects are 'secure by default' and that security is a shared responsibility between the platform and its customers.