Datasette patches SQL injection that leaked private tables

Simon Willison patched a SQL injection in Datasette on August 6 that let public-table users read rows from private tables, per his writeup.

The hole hit any installation serving public and private tables from the same database, the exact split Datasette's permission system exists to guard. Even with the execute-sql feature turned off, a public-table user could still reach data they'd never been granted access to.

The injection ran through Datasette's query builder rather than around it. Permission checks sat above the query layer, so once attacker-controlled SQL reached the builder, nothing stopped it from touching the private tables.

Willison shipped the fix as 1.0a38 and backported it to 0.65.3 the same day. He also said the mixed configuration, public and private tables sharing one database, is uncommon, which caps how many live installs were actually exposed.

The real lesson isn't specific to Datasette. Any tool that checks permissions above a general-purpose query builder instead of inside it carries the same hole. Watch for the same bug shape in other apps that run ad hoc queries against a database holding both public and private data.