Supabase Realtime vulnerabilities

• supabase realtime Supabase Realtime: Expired JWTs with string exp are accepted by REST broadcast authorization CVE-2026-54238 3.1 LowOctober 22, 2026
• supabase realtime Supabase Realtime: Incorrect Authorization CVE-2026-62247 6.5 MediumSeptember 21, 2026