Datasette 1.0a39 and 0.65.4 security releases
· Source: Simon Willison
Two security patches for Datasette have been released: version 1.0a39, which belongs to the alpha branch, and version 0.65.4, part of the stable 0.65.x series. Both updates target users running a Datasette instance that is exposed to the Internet, especially when the same server hosts both public and private tables.
The vulnerability detection process began after several external contributors reported issues. The development team carried out a thorough audit using advanced AI models—including Claude Fable, GPT‑5, and GPT‑6—to uncover extremely subtle flaws. The authors then split the work: one created automated tests that reproduced each problem, while the other applied the fixes, ensuring that every case was reviewed by two people and that the AI agents offered different perspectives.
These patches are critical for preserving data confidentiality and integrity in environments where public and restricted resources coexist. Applying the updates lowers the risk of unauthorized exposure and strengthens confidence in applications that rely on Datasette to deliver information to end users.
Read the original article on Simon Willison
This summary is an informational synthesis produced by dataqbs.com. All rights to the original content belong to its author and the cited media outlet. We act solely as curators of technology news and claim no authorship.