Open SourceSimon Willison

datasette 1.0a38

#datasette#sql-injection#security#open-source

English

The release of datasette 1.0a38 addresses a SQL injection vulnerability affecting instances that combine public and private tables. Site administrators are advised to disable the execute-sql permission to protect private data from unauthorized access via public tables.

中文

datasette 1.0a38 的发布解决了影响公共和私人表混合使用的 SQL 注入漏洞。网站管理员被建议禁用执行 SQL 权限，以保护私人数据不被公共表的未授权访问。