datasette 0.65.5
How-To How to actually use this
What changed: Datasette fixed a security issue where a trailing newline in a table name could bypass permissions and expose private rows.
How to use it:
- Upgrade your Datasette installation to version 0.65.5 immediately.
- Review your table permissions to ensure no unauthorized access occurred before the update.
- Test that your private tables are no longer accessible via malformed requests.
Good for: anyone running Datasette with private data.
Release: datasette 0.65.5 Security fix for an issue where a trailing newline in a requested table name could bypass table permissions and expose private rows, reported by dpfkdlemtp in GHSA-h547-rmjf-5m2m . Tags: security , datasette
Read original article on Simon Willison's Weblog →
