Emerald Red Team

ERT-BAAS-004

Supabase DELETE allowed for anonymous users

CriticalA01:2025CWE-284

Why it matters

Open tables, missing RLS, public buckets, open Firebase rules. This check looks specifically for: supabase delete allowed for anonymous users.

How to fix it

Open the finding in Emerald Red Team for a fix prompt tailored to your stack and AI tool.

How we test it

Backend config — reads your connected Supabase or Firebase configuration.

Does your app have this problem?

Create a free account and verify your app to test for it.

Scan my app — free