Lovable security crisis: 48 days of exposed projects, closed bug reports, & the structural failure of vibe coding security

Summary: Lovable, the $6.6 billion vibe coding platform with eight million users, has faced three documented security incidents exposing source code, database credentials, and thousands of user records, with the most recent BOLA vulnerability left open for 48 days after the company closed a bug bounty report without escalation. The incidents are representative of a […] This story continues at The Next Web