Issues

While configuring the organisation settings under General → Data Privacy, I encountered an issue with the Supabase Assistant Opt-in Level.

supabase/supabase#52554 · opened

on Oct 30, 2026

1

Escalation of SU-513972 — staging deployment blocked by cron.job lock privileges (PostgreSQL 17.6)

supabase/supabase#52550 · opened

on Oct 30, 2026

Docs: auth.email.secure_password_change described as "require current password", but it maps to reauthentication; no config.toml key for the real setting

supabase/supabase#52546 · opened

on Oct 30, 2026

Hosted PostgREST 14.5 returns 401/PGRST303 after successful Supabase Auth sign-in

supabase/supabase#52541 · opened

on Oct 30, 2026

1

iOS: the first API request after a 2-3 minute pause fails with -1005 (HTTP/3 idle timeout 180 s on the edge, no NAT rebinding)

supabase/supabase#52538 · opened

on Oct 29, 2026

Unexpected PostgreSQL Database Creation in Supabase Project (ALPHA SOLUTION)

supabase/supabase#52537 · opened

on Oct 29, 2026

2

Bug report: Hosted SQL Editor and MCP fail with PostgreSQL 28000 PAM authentication error

supabase/supabase#52461 · opened

on Oct 28, 2026

6

Managed postgres_exporter spills ~49 MB of temporary files in five minutes on Free/Nano

supabase/supabase#52457 · opened

on Oct 28, 2026

Bump self-hosted images to patch Node.js Brotli vulnerability (CVE-2026-111497)

supabase/supabase#52430 · opened

on Oct 27, 2026

1

SMTP configuration example sends port as number, API expects string

supabase/supabase#52384 · opened

on Oct 27, 2026

1

Self-hosted: gateway CORS on /functions/v1 allows every origin and overrides the function's own CORS (differs from hosted)

supabase/supabase#52346 · opened

on Oct 27, 2026

2

Markdown export truncates headings that contain an earlier [#...] token and end with brackets

supabase/supabase#52311 · opened

on Oct 26, 2026

2

studio: PlanUpdateSidePanel fires useOrgSubscriptionQuery on mount when BILLING_READ is denied and omits disableProjectCreationAndUpdate

supabase/supabase#52296 · opened

on Oct 26, 2026

2

e2e/docs: checkLinkFromBrowser falls back to full document DOM when articleSelector is missing on reference pages

supabase/supabase#52277 · opened

on Oct 25, 2026

1

Studio build fails immediately on Windows: "$SKIP_ASSET_UPLOAD" was unexpected at this time.

supabase/supabase#52133 · opened

on Oct 22, 2026

1

GitHub integration: overlapping production deploy runs race, so an older commit's Edge Functions can overwrite a newer commit's

supabase/supabase#52048 · opened

on Oct 20, 2026

4

API gateway (sb_gateway_version 2) holds browser requests ~5 s while upstream answers in 3–5 ms

supabase/supabase#52011 · opened

on Oct 20, 2026

5

SQL Editor: cannot paste text into the empty query box on iOS Safari

supabase/supabase#51949 · opened

on Oct 19, 2026

2

pg-meta: function configuration values containing equals signs are truncated

supabase/supabase#51916 · opened

on Oct 19, 2026

Edge Functions: HTTP/2 connection closed with no response on function-generated 4xx (HTTP/1.1 works)

supabase/supabase#51893 · opened

on Oct 18, 2026

2

Connect sheet: Shift+scroll can't scroll code blocks horizontally when the sheet is at the top or bottom of its scroll range

supabase/supabase#51880 · opened

on Oct 18, 2026

1

SQL Editor auto row limit is bypassed for SELECT queries using CTEs

supabase/supabase#51879 · opened

on Oct 18, 2026

1

Unauthenticated Remote SQL and Migration Execution via MCP Endpoint

supabase/supabase#51877 · opened

on Oct 18, 2026

1

Unauthenticated Disclosure of Project JWT Secret and Superuser Service Role Key

supabase/supabase#51876 · opened

on Oct 18, 2026

2

Unauthenticated Server-Side Request Forgery (SSRF) and Arbitrary HTTP Proxying

supabase/supabase#51875 · opened

on Oct 18, 2026

1

Navigation Menu

Repository navigation

Issues

While configuring the organisation settings under General → Data Privacy, I encountered an issue with the Supabase Assistant Opt-in Level.

Escalation of SU-513972 — staging deployment blocked by cron.job lock privileges (PostgreSQL 17.6)

Docs: auth.email.secure_password_change described as "require current password", but it maps to reauthentication; no config.toml key for the real setting

Hosted PostgREST 14.5 returns 401/PGRST303 after successful Supabase Auth sign-in

iOS: the first API request after a 2-3 minute pause fails with -1005 (HTTP/3 idle timeout 180 s on the edge, no NAT rebinding)

Unexpected PostgreSQL Database Creation in Supabase Project (ALPHA SOLUTION)

Bug report: Hosted SQL Editor and MCP fail with PostgreSQL 28000 PAM authentication error

Managed postgres_exporter spills ~49 MB of temporary files in five minutes on Free/Nano

Bump self-hosted images to patch Node.js Brotli vulnerability (CVE-2026-111497)

SMTP configuration example sends port as number, API expects string

Self-hosted: gateway CORS on /functions/v1 allows every origin and overrides the function's own CORS (differs from hosted)

Markdown export truncates headings that contain an earlier [#...] token and end with brackets

studio: PlanUpdateSidePanel fires useOrgSubscriptionQuery on mount when BILLING_READ is denied and omits disableProjectCreationAndUpdate

e2e/docs: checkLinkFromBrowser falls back to full document DOM when articleSelector is missing on reference pages

Studio build fails immediately on Windows: "$SKIP_ASSET_UPLOAD" was unexpected at this time.

GitHub integration: overlapping production deploy runs race, so an older commit's Edge Functions can overwrite a newer commit's

API gateway (sb_gateway_version 2) holds browser requests ~5 s while upstream answers in 3–5 ms

SQL Editor: cannot paste text into the empty query box on iOS Safari

pg-meta: function configuration values containing equals signs are truncated

Edge Functions: HTTP/2 connection closed with no response on function-generated 4xx (HTTP/1.1 works)

Connect sheet: Shift+scroll can't scroll code blocks horizontally when the sheet is at the top or bottom of its scroll range

SQL Editor auto row limit is bypassed for SELECT queries using CTEs

Unauthenticated Remote SQL and Migration Execution via MCP Endpoint

Unauthenticated Disclosure of Project JWT Secret and Superuser Service Role Key

Unauthenticated Server-Side Request Forgery (SSRF) and Arbitrary HTTP Proxying

📋 Server Request & Proxy Logs

⚙️ Pengaturan Proxy Target

Issues

Issues

Issues