Datasette released two security patches, 1.0a39 and 0.65.4, fixing flaws that could expose private tables in publicly hosted instances, following an audit aided by frontier AI models.

1 min read

Datasette Ships 1.0a39 and 0.65.4 Security Fixes After AI-Led Audit

What happened

FAQ

What is Datasette?

An open-source tool for exploring and publishing SQLite databases on the web, widely used in research, government data, and data journalism.

Am I affected?

If you run Datasette on the public web, especially mixing public and private tables in one instance, you are affected and should upgrade immediately.

What's new in the security process?

The team used frontier AI models to audit the code, then double-reviewed every fix with humans, a workflow they plan to keep for all future development.

Does this matter for MENA data teams?

Yes. Many government and research bodies in the region publish open data via Datasette, and upgrading protects sensitive tables from exposure.

Source: Simon Willison (LLM & tools)

AI-assisted content, human-reviewed.