Open SourceSimon Willison

datasette 0.65.5

#datasette#security#open source#data#release

English

The release of datasette 0.65.5 includes a security fix for an issue that allowed a trailing newline in a requested table name to bypass table permissions, potentially exposing private rows. This update was reported by dpfkdlemtp in GHSA-h547-rmjf-5m2m.

中文

datasette 0.65.5 的发布包含了一项安全修复，解决了请求的表名中尾随换行符可能绕过表权限并暴露私有行的问题。该更新由 dpfkdlemtp 在 GHSA-h547-rmjf-5m2m 中报告。