Browse / Lovable VDP

Lovable VDP

See its reports on the map

What gets reported to Lovable VDP

• Access Control4
• Open Redirect2
• Business Logic1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Improper Authorization Leads to Editor can toggle admin-only workspace features (Lovable AI)Improper Authorization · low
   79 votes
2. Business Logic Bypass Allows Setting “Read Access” Role Without Pro Plan SubscriptionBusiness Logic Errors · medium
   78 votes
3. Bypass of Open Redirect Fix on lovable.dev via /..// Path Traversal in redirect parameterOpen Redirect · medium
   74 votes
4. Users can change project visibility which requires high subscription by just changing request bodyImproper Access Control - Generic · medium
   71 votes
5. Improper Authorization Leads to Editor can toggle admin-only workspace features (Lovable Cloud)Improper Authorization · low
   66 votes
6. Low-privileged user can enable or disable Lovable AI for new projects in workspaceImproper Authorization · low
   56 votes
7. Open Redirect on lovable.dev via redirect parameter leads to phishing attacksOpen Redirect
   44 votes