Supabase One-Click Template Exposes Postgres to Web

A new CVE landed today that has nothing to do with anon keys or web configs — it's a database left wide open by default. At the same time, Cursor keeps pushing its agents toward more autonomy and fewe