Download Latest Version
0.65.3 source code.zip (766.3 kB)
Get an email when there's a new version of Datasette
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| 0.65.3 source code.tar.gz | 2026-08-06 | 642.5 kB | |
| 0.65.3 source code.zip | 2026-08-06 | 766.3 kB | |
| README.md | 2026-08-06 | 826 Bytes | |
| Totals: 3 Items | 1.4 MB | 0 | |
This release fixes a SQL injection security issue that affects Datasette instances that serve a mixture of public and private tables in the same database, with access configured using the Datasette permissions system.
Site administrators who serve private tables in this way are advised to disable the execute-sql permission on that database to prevent users from accessing private tables using raw SQL queries. The bug that has been fixed would have allowed users with access to any public table to execute SQL injection attacks despite that restriction, giving them read-only access to data in private tables in the same database.
This fix is also available in Datasette 1.0a38.
