SQLite

2 articles

Web Engineering • Aug 7, 2026

Fix the Datasette SQL Injection: Why execute-sql Won't Save You

The Datasette SQL injection patched in 1.0a38 and 0.65.3 leaks private tables via unescaped filter columns. The check, upgrade, and why execute-sql is no fix.

8 min read

AI Security • Aug 4, 2026

Fake CVE Reports: 54 of 55 SQLite Advisories Were AI Slop

Fake CVE reports are now cheaper to write than to disprove. JFrog found 54 of 55 SQLite advisories fabricated by an LLM. How to spot them before you patch.

11 min read