---
id: 20260807-T0-15
title: "Datasette 1.0a38修复SQL注入漏洞，影响混合公开/私有表实例"
title_en: "Datasette 1.0a38 fixes critical SQL injection flaw in mixed-table setups"
url: https://ai.daily.yangsir.net/daily/20260807-T0-15
issue_date: 2026-08-07
publish_date: 2026-08-06T18:24:34.000Z
category: release
source_name: "Simon Willison"
source_url: https://simonwillison.net/2026/Aug/6/datasette/#atom-everything
---

# Datasette 1.0a38修复SQL注入漏洞，影响混合公开/私有表实例

Datasette发布1.0a38版本，修复了一个影响同时服务公开和私有表实例的SQL注入安全漏洞。该漏洞可通过Datasette权限系统被利用，管理员需尽快升级。

## English Version

**Datasette 1.0a38 fixes critical SQL injection flaw in mixed-table setups**

Datasette 1.0a38 patches a SQL injection vulnerability affecting instances serving both public and private tables with permission-based access. Admins are urged to upgrade immediately.

---

**来源**：[Simon Willison](https://simonwillison.net/2026/Aug/6/datasette/#atom-everything)

**详情页**：https://ai.daily.yangsir.net/daily/20260807-T0-15

---

*智语观潮 · Daily — https://ai.daily.yangsir.net/llms.txt*