METHODOLOGY: HOW WE DISCOVERED OVER 2K HIGH-IMPACT VULNERABILITIES IN APPS BUILT WITH VIBE CODING PLATFORMS

Summary from the TLDR InfoSec newsletter

Platforms that enable anyone to build applications without prior coding experience are surging in popularity, but they also introduce serious security concerns. Escape's research analyzed over 5,600 publicly available applications created with these “vibe coding” tools and found more than 2,000 vulnerabilities, along with hundreds of exposed secrets and personal data. Many issues arose from inexperienced users misconfiguring security, particularly when platforms automatically integrated third-party services, such as Supabase, without strict access controls.