ERT-BAAS-007
SECURITY DEFINER functions callable via RPC
HighA01:2025CWE-269
Why it matters
Open tables, missing RLS, public buckets, open Firebase rules. This check looks specifically for: security definer functions callable via rpc.
How to fix it
Open the finding in Emerald Red Team for a fix prompt tailored to your stack and AI tool.
How we test it
Backend config — reads your connected Supabase or Firebase configuration.
Does your app have this problem?
Create a free account and verify your app to test for it.
Scan my app — free