Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-09-17 · source-backed
GHSA-h547-rmjf-5m2m: appending a newline to a table name in a request bypassed table permission checks and exposed private rows. Simon Willison released fixes in both 1.0a40 and 0.65.5 on September 16. The shape generalizes past Datasette. Any permission check that normalizes an identifier differently from the code that resolves it has this bug.
Each link below shares sources, entities, or timing with this story.
Simon Willison released 1.0a39 and 0.65.4 on September 10 after an audit with Fable 5.1, GPT-5.6 and GPT-6 Astra, alongside Sevban Dönmez and Alex Garcia. Permission checks ignored SQLite's case-insensitive table names. FTS index tables were readable without permission. Restri...
Simon Willison released 1.0a33 on June 11, extending the ?_extra= JSON API to queries and rows. The build method is the interesting part: he planned with Claude Fable 5 in Claude Code and implemented with GPT-5.5 xhigh in Codex Desktop. One feature, two models, planning split...
Willison shipped datasette-agent-edit 0.1a0 on June 7, letting agents perform structured data edits inside Datasette, alongside micropython-wasm sandbox work for running untrusted agent code. Separately his evolving Agentic Engineering Patterns guide reframes the work around t...
Willison launched datasette-apps (0.1a2) on June 18, hosting self-contained HTML+JS apps in a sandboxed iframe that run SQL against your data, read-only by default. He frames it as "Claude Artifacts reimagined for Datasette," artifacts backed by a JSON API to a relational data...
His conclusion is DuckDB matches or beats SQLite's safety for untrusted queries, but only with enable_external_access=false, lock_configuration=true, and a watchdog thread, since DuckDB lacks SQLite's opcode-based query timeouts. He ships a safe_duckdb.py helper and a Datasett...
The Astra coverage went to price and context window. The number that changes how I'd deploy it went into a system card nobody read. Artificial Analysis measured GPT-6 Astra's hallucination rate on AA-Omniscience at 51% at max effort, against 92% for its predecessor. Accuracy w...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.