Missing RLS, a Next.js RCE, Leaky Secrets

Cursor skips Supabase RLS by default, a Next.js RCE hit Cal.com, and Vercel added secret scanning. What today’s vibe-coding security news… Continue reading on Medium »