0.65.2
Security relevant
⚠ Upgrade required
- Upgraded for compatibility with Python 3.14.
- Fixed `datasette publish cloudrun` to accommodate changes in the underlying Cloud Run architecture.
- Minor upgrades addressing `pkg_resources` deprecation warnings.
Security fixes
- CVE-2024-XXXXX – Fixed open redirect vulnerability that allowed redirection to arbitrary URLs such as `example.com/foo/bar` when accessing paths like `//example.com/foo/bar`
Full changelog
- Fixes an open redirect security issue: Datasette instances would redirect to
example.com/foo/barif you accessed the path//example.com/foo/bar. Thanks to James Jefferies for the fix. #2429 - Upgraded for compatibility with Python 3.14.
- Fixed
datasette publish cloudrunto work with changes to the underlying Cloud Run architecture. #2511 - Minor upgrades to fix warnings, including
pkg_resourcesdeprecation.
