Supabase Realtime session mechanism vulnerability

Versions of Supabase Realtime prior to 2.103.1 contain a vulnerability related to the session mechanism. This vulnerability arises because the REST broadcast endpoint accepts expired JWTs when the exp value is encoded as a JSON string rather than a JSON number. As a result, unauthenticated...