Supabase MCP can leak your entire SQL database
A post on simonwillison.net is cited by 4 distinct blogs to date (corpus.blog, measured 11 October 2026).
A record is what was published and who pointed at it. The text of the post is not shown here: read it at the source, or at its Wayback capture.
4blogs citing
| Period | Blogs | Links |
|---|---|---|
| All time | 4 | 7 |
| Last 90 days | 2 | 3 |
| Last 30 days | 1 | 1 |
| Last 7 days | 0 | 0 |
| First cited | 3 Oct 2025 |
|---|---|
| Latest citation | 21 Sept 2026 |
| Words blogs link it with | 5 |
| External links | 3 |
| Length | 366 |
0 this week (still settling) · peak 1
Show as table
| Week of | Value |
|---|---|
| 29 Sept 2025 | 1 |
| 6 Oct 2025 | 0 |
| 13 Oct 2025 | 0 |
| 20 Oct 2025 | 0 |
| 27 Oct 2025 | 0 |
| 3 Nov 2025 | 0 |
| 10 Nov 2025 | 0 |
| 17 Nov 2025 | 0 |
| 24 Nov 2025 | 0 |
| 1 Dec 2025 | 0 |
| 8 Dec 2025 | 0 |
| 15 Dec 2025 | 0 |
| 22 Dec 2025 | 0 |
| 29 Dec 2025 | 0 |
| 5 Jan 2026 | 0 |
| 12 Jan 2026 | 0 |
| 19 Jan 2026 | 0 |
| 26 Jan 2026 | 0 |
| 2 Feb 2026 | 0 |
| 9 Feb 2026 | 0 |
| 16 Feb 2026 | 0 |
| 23 Feb 2026 | 0 |
| 2 Mar 2026 | 0 |
| 9 Mar 2026 | 0 |
| 16 Mar 2026 | 0 |
| 23 Mar 2026 | 0 |
| 30 Mar 2026 | 0 |
| 6 Apr 2026 | 0 |
| 13 Apr 2026 | 0 |
| 20 Apr 2026 | 0 |
| 27 Apr 2026 | 0 |
| 4 May 2026 | 0 |
| 11 May 2026 | 0 |
| 18 May 2026 | 0 |
| 25 May 2026 | 0 |
| 1 Jun 2026 | 0 |
| 8 Jun 2026 | 1 |
| 15 Jun 2026 | 1 |
| 22 Jun 2026 | 0 |
| 29 Jun 2026 | 0 |
| 6 Jul 2026 | 0 |
| 13 Jul 2026 | 0 |
| 20 Jul 2026 | 0 |
| 27 Jul 2026 | 0 |
| 3 Aug 2026 | 0 |
| 10 Aug 2026 | 0 |
| 17 Aug 2026 | 0 |
| 24 Aug 2026 | 0 |
| 31 Aug 2026 | 0 |
| 7 Sept 2026 | 0 |
| 14 Sept 2026 | 0 |
| 21 Sept 2026 | 1 |
| 28 Sept 2026 | 0 (still settling) |
| 5 Oct 2026 | 0 (still settling) |
Each blog counts once, in the week of its first citation. A blog added to the index recently can bring old first citations in at once.
Words blogs link it with
The words blogs link this page with, by how many different blogs use them.
- agent operated the database with a service role1 blog
- hit by a prompt-injection attack1 blog
- service role that bypassed1 blog
- simon willison calls the lethal trifecta1 blog
- supabase’s cursor agent1 blog
Cited by 4 blogs in 7 posts
One row per blog, the most recently citing first. Each shows the blog's newest citing post; open a row for the others.
linked as “Willison’s response”
Read at aminrj.com (opens in a new tab)linked as “agent operated the database with a service role”
Read at cerbos.dev (opens in a new tab)3 other posts
linked as “service role that bypassed”
Read at cerbos.dev (opens in a new tab)linked as “surfaced”
Read at cerbos.dev (opens in a new tab)linked as “hit by a prompt-injection attack”
Read at cerbos.dev (opens in a new tab)linked as “Simon Willison calls the lethal trifecta”
Read at hidekazu-konishi.com (opens in a new tab)Links from this post
Elsewhere on simonwillison.net (2)
Something wrong here? Report a problem