Skip to content
ShipSecurelySecurity reference
Menu

13 tools · 88 fixes · 22 incidents tracked · Updated Oct 13, 2026 · Sources: Supabase, GitHub, OWASP, Stripe + 9

Firebase

Server Actions with no auth check in Firebase

criticalUpdated Oct 12, 2026

If the action uses the Admin SDK, rules will not stop it. The session check in the action is the control.

Fix for Firebase

If the action uses the Admin SDK, rules will not stop it. The session check in the action is the control.

The five-minute check, the other platforms, and the agent prompt are on the full guide. More Firebase fixes are on the Firebase page.