Datasette 1.0a38 patches SQL injection that could expose private tables
The alpha release fixes a SQL injection flaw that let users query private tables via public ones, even when the execute-sql permission was disabled. Site admins must update now or tighten permissions. The same fix lands in Datasette 0.65.3.