Datasette Ships 1.0a39 and 0.65.4 Security Fixes After AI-Led Audit
What happened
FAQ
What is Datasette?
An open-source tool for exploring and publishing SQLite databases on the web, widely used in research, government data, and data journalism.
Am I affected?
If you run Datasette on the public web, especially mixing public and private tables in one instance, you are affected and should upgrade immediately.
What's new in the security process?
The team used frontier AI models to audit the code, then double-reviewed every fix with humans, a workflow they plan to keep for all future development.
Does this matter for MENA data teams?
Yes. Many government and research bodies in the region publish open data via Datasette, and upgrading protects sensitive tables from exposure.
Source: Simon Willison (LLM & tools)
AI-assisted content, human-reviewed.