Datasette's security patches came out of a multi-model audit

Simon Willison released Datasette 1.0a39 and 0.65.4 on September 10, fixing three permission bugs found in a security audit. The audit paired Fable 5.1, GPT-5.6 and GPT-6 Astra with human reviewers Sevban Dönmez and Alex Garcia.

Datasette runs as a public tool over SQLite databases that often mix public and private tables in one instance. A permission bug there can expose private data to anyone who can query the public side.

Permission checks ignored SQLite's case-insensitive table names, letting a differently-cased table name slip past an access rule. FTS index tables were readable with no permission check at all. Restricted actors could create API tokens.

Willison calls the bugs "very subtle." A case-insensitive table name reads correct at a glance. It only breaks under SQLite's own matching rules.

The writeup doesn't say how the audit was structured. It's unclear whether the three models reviewed the same code independently or split it among them.

Upgrade now if you run a mix of public and private tables on one instance, rather than waiting for the next routine release.