Supabase PostgREST API Information Disclosure

I was working on an application that allows users to divide the cost of something with other people who participate in that party or event. Users can create a group, add members, and input card numbers. They can also claim the group name using a subs...