Read the docs

Lovable

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Lovable records in CISA KEV

No Lovable vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-30975 CVE-2025-48757 · GHSA-773x-pxjg-gxgx

Incorrect authorization in Lovable

Priority HIGH 79

An insufficient database Row-Level Security policy in Lovable through 2025-04-15 allows remote unauthenticated attackers to read or write to arbitrary database tables of generated sites.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00833 Published 2025-05-30 No fix listed CWE-863
Open these records in search →