Threat
datasette-llm 0.1a10
First reported · Discovered simonwillison.net
Page published
Earliest dated coverage: 4 Nov 2026 · First observed: 5 Nov 2026 · Latest dated coverage: 4 Nov 2026
Coverage timeline
Single-source advisory — one report is available.
Why it matters
The datasette-llm model-restriction bug undermines configured model allowlists, making the fix relevant to deployments that depend on those restrictions.
datasette-llm 0.1a10 fixes a bug that failed to restrict available LLM models to those specified in configuration. The issue affected Simon Willison’s agent.datasette.io demo; the announcement does not describe exploitation or additional impact.