SecuritySimon Willisonabout 4 hours ago
datasette 1.0a38
1 min read
Datasette 1.0a38 fixes a SQL injection security issue affecting instances serving public and private tables in the same database. The bug allowed users with public table access to read private data via raw SQL. Administrators should disable the execute-sql permission.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
