Lovable's API Design Exposed Private Data in Public Projects
A security researcher's free Lovable account became a skeleton key. With five standard API calls, they accessed source code, database credentials, and AI chat histories from projects belonging to...

