hiw3c AI 日报
Simon Willison 网页快照

凤尾鱼0.65.5

原文标题 · datasette 0.65.5

发布:收件箱0.65.5安全修复了dpfkdlemtp在GHSA-h547-rmjf-5 m2m中报告的问题,即请求的表名称中的尾随新元素可能绕过表权限并公开私有行。标签:安全,小隔间

来源:Simon Willison · simonwillison.net

正文为英文,可一键机器翻译(仅首次需要等待)

Simon Willison’s Weblog

Security fix for an issue where a trailing newline in a requested table name could bypass table permissions and expose private rows, reported by dpfkdlemtp in GHSA-h547-rmjf-5m2m .

Recent articles

Generating running routes with GPT-6 Astra and ChatGPT Work - 12th September 2026

OpenAI agents attacked RubyGems back in May - 12th September 2026

Some thoughts on the Navier–Stokes Millennium Prize Problem - 8th September 2026

This is a beat by Simon Willison, posted on 16th September 2026 .

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.