remote/datasette
1
0
Fork 0
mirror of https://github.com/simonw/datasette.git synced 2026-09-17 22:14:06 +02:00
Code Issues Projects Releases Packages Wiki Activity

Add intro sentence to 1.0a40 release notes

Browse source
This commit is contained in:
Simon Willison 2026-09-16 16:55:01 -07:00
commit 1dbbacedda
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
docs/changelog.rst
View file

@ -9,6 +9,11 @@ Changelog
1.0a40 (2026-09-16)
-------------------
A security fix, a new set of APIs providing background tasks for plugins, an endpoint for counting matching rows, and a collection of bug fixes.
Security fix
~~~~~~~~~~~~
- Fixed a security issue where a trailing newline in a requested table name could bypass table permissions and expose private rows. Thanks for the report, `dpfkdlemtp <https://github.com/dpfkdlemtp>`__. `GHSA-h547-rmjf-5m2m <https://github.com/simonw/datasette/security/advisories/GHSA-h547-rmjf-5m2m>`__
Background tasks