
Supabase Patches 44 Postgres CVEs, Some Fixes Need Your Action
Supabase rolls Postgres 15.19/17.11 out to every project starting today, closing 44 CVEs and flagging four breaking changes that need manual follow-up.
Topic
6 articles tagged Postgres.

Supabase rolls Postgres 15.19/17.11 out to every project starting today, closing 44 CVEs and flagging four breaking changes that need manual follow-up.

Supabase's Postgres Changes now supports AND filters, more operators and opt-in column selection, cutting bytes sent to Realtime subscribers.

Starting August 5, Supabase ignores explicit version numbers on Postgres extensions and installs the default version instead, closing a security gap.

Supabase is flipping the default API gateway in its self-hosted Docker stack from Kong to Envoy the week of Aug 9, 2026, a breaking change for some setups.

Supabase's managed Postgres-to-BigQuery replication service is now public alpha on every paid plan, billed hourly per pipeline whether or not it's replicating.

Supabase turned off Postgres connection logging by default July 9, and migrated existing Free and Pro projects with no opt-in.