datasette 0.65.5 发布安全修复
datasette 0.65.5
朋友发了 datasette 0.65.5，修复了表名末尾换行符导致权限绕过的漏洞，能避免数据泄露。
datasette 0.65.
5 版本发布，修复了一个安全漏洞。该漏洞允许通过请求表名末尾的换行符绕过权限设置，从而暴露私有数据行。
此问题由 GitHub 用户 dpfkdlemtp 报告，并关联到 GHSA-h547-rmjf-5m2m。
datasette 0.65.5
Release: datasette 0.65.5 Security fix for an issue where a trailing newline in a requested table name could bypass table permissions and expose private rows, reported by dpfkdlemtp in GHSA-h547-rmjf-5m2m . Tags: security , datasette
This report is categorized under AITOP's "How-to" desk. Within our cross-regional analytical framework, it directly maps to AI developer toolchains, coding agents, and engineering workflows. Key entities and technical topics under continuous tracking include datasette, 安全, 漏洞修复.
Source attribution: curated from Simon Willison’s Weblog.