MAL-2025-42020 Malicious code in lovable-cli (npm)

The package lovable-cli was found to contain malicious code...

Malicious code in lovable-logger (npm)

The package lovable-logger was found to contain malicious code...

MAL-2025-42022 Malicious code in lovable-loggers (npm)

The package lovable-loggers was found to contain malicious code...

MAL-2025-42021 Malicious code in lovable-logger (npm)

The package lovable-logger was found to contain malicious code...

AI Website Builder Lovable Abused for Phishing and Malware Scams

Scammers have been spotted abusing AI site builder Lovable to mimic trusted brands, steal credentials, drain crypto wallets,…...

CVE-2025-48757

CVE-2025-48757 concerns Lovable where an insufficient database Row-Level Security (RLS) policy up to 2025-04-15 could allow remote unauthenticated attackers to read or write to arbitrary database tables of generated sites. Several sources (NVD, Red Hat, CVE.org, CNNVD, PT-Security) confirm the is...

CVE-2025-48757: Incorrect Authorization

An insufficient database Row-Level Security policy in Lovable through 2025-04-15 allows remote unauthenticated attackers to read or write to arbitrary database tables of generated sites. NOTE: this is disputed by the Supplier because each individual customer of the Lovable platform accepts a...

Lovable 安全漏洞

Lovable is an AI full-stack application builder from Lovable. A security vulnerability exists in Lovable versions 2025-04-15 and earlier, which stems from an insufficient database row-level security policy that could allow an unauthenticated attacker to read and write arbitrary database tables...