Het verhaal
On 11 Sep 2026 Simon Willison released Datasette 1.0a39 (alpha line) and 0.65.4 (stable) as security patches. Anyone running Datasette on the public web — especially instances that mix public and private tables — should upgrade. After reports from Sevban Dönmez, Alex Garcia and Willison audited Datasette with Claude Fable 5.1, GPT-5.6, and GPT-6 Astra, then spent nearly a week pairing on tests and fixes (one person writes failing tests, the other implements). They plan to keep frontier-model security audits in the Datasette development workflow.