From 77b141203ca7ae95d697577c1a4ed2a161913cb1 Mon Sep 17 00:00:00 2001 From: Ngo Quoc Dat Date: Sun, 1 Nov 2026 01:17:24 +0700 Subject: [PATCH] chore(release): v0.83.1 --- apple/CHANGELOG.md | 73 +++++++++++++++++++ .../+ghsa-58fh-9ghw-9qwv.security.1.md | 1 - .../+ghsa-58fh-9ghw-9qwv.security.2.md | 1 - .../+ghsa-58fh-9ghw-9qwv.security.3.md | 1 - .../+ghsa-58fh-9ghw-9qwv.security.md | 1 - .../+ghsa-94m6-qx4g-cpwg.changed.md | 1 - .../changelog.d/+ghsa-94m6-qx4g-cpwg.fixed.md | 1 - .../+ghsa-94m6-qx4g-cpwg.removed.md | 1 - .../+ghsa-94m6-qx4g-cpwg.security.1.md | 1 - .../+ghsa-94m6-qx4g-cpwg.security.2.md | 1 - .../+ghsa-94m6-qx4g-cpwg.security.3.md | 1 - .../+ghsa-94m6-qx4g-cpwg.security.4.md | 1 - .../+ghsa-94m6-qx4g-cpwg.security.5.md | 1 - .../+ghsa-94m6-qx4g-cpwg.security.6.md | 1 - .../+ghsa-94m6-qx4g-cpwg.security.7.md | 1 - .../+ghsa-94m6-qx4g-cpwg.security.8.md | 1 - .../+ghsa-94m6-qx4g-cpwg.security.md | 1 - .../+ghsa-cr7m-37cv-h5p8.security.1.md | 1 - .../+ghsa-cr7m-37cv-h5p8.security.2.md | 1 - .../+ghsa-cr7m-37cv-h5p8.security.3.md | 1 - .../+ghsa-cr7m-37cv-h5p8.security.md | 1 - .../+ghsa-gg4q-84m8-8jhv.security.md | 1 - .../+ghsa-hgr8-24vm-5m54.security.1.md | 1 - .../+ghsa-hgr8-24vm-5m54.security.2.md | 1 - .../+ghsa-hgr8-24vm-5m54.security.md | 1 - .../+ghsa-j2xw-m3p7-3m64.security.1.md | 1 - .../+ghsa-j2xw-m3p7-3m64.security.10.md | 1 - .../+ghsa-j2xw-m3p7-3m64.security.2.md | 1 - .../+ghsa-j2xw-m3p7-3m64.security.3.md | 1 - .../+ghsa-j2xw-m3p7-3m64.security.4.md | 1 - .../+ghsa-j2xw-m3p7-3m64.security.5.md | 1 - .../+ghsa-j2xw-m3p7-3m64.security.6.md | 1 - .../+ghsa-j2xw-m3p7-3m64.security.7.md | 1 - .../+ghsa-j2xw-m3p7-3m64.security.8.md | 1 - .../+ghsa-j2xw-m3p7-3m64.security.9.md | 1 - .../+ghsa-j2xw-m3p7-3m64.security.md | 1 - .../+ghsa-jj3q-3mpv-f853.security.1.md | 1 - .../+ghsa-jj3q-3mpv-f853.security.2.md | 1 - .../+ghsa-jj3q-3mpv-f853.security.3.md | 1 - .../+ghsa-jj3q-3mpv-f853.security.4.md | 1 - .../+ghsa-jj3q-3mpv-f853.security.5.md | 1 - .../+ghsa-jj3q-3mpv-f853.security.6.md | 1 - .../+ghsa-jj3q-3mpv-f853.security.md | 1 - .../changelog.d/+ghsa-rhxc-5m3h-r5ch.fixed.md | 1 - .../+ghsa-rhxc-5m3h-r5ch.security.md | 1 - apple/changelog.d/3848.fixed.1.md | 1 - apple/changelog.d/3848.fixed.2.md | 1 - apple/changelog.d/3848.fixed.3.md | 1 - apple/changelog.d/3848.fixed.md | 1 - apple/changelog.d/3906.fixed.md | 1 - apple/changelog.d/3906.security.md | 1 - apple/changelog.d/3907.fixed.1.md | 1 - apple/changelog.d/3907.fixed.2.md | 1 - apple/changelog.d/3907.fixed.3.md | 1 - apple/changelog.d/3907.fixed.4.md | 1 - apple/changelog.d/3907.fixed.5.md | 1 - apple/changelog.d/3907.fixed.6.md | 1 - apple/changelog.d/3907.fixed.7.md | 1 - apple/changelog.d/3907.fixed.md | 1 - 59 files changed, 73 insertions(+), 58 deletions(-) delete mode 100644 apple/changelog.d/+ghsa-58fh-9ghw-9qwv.security.1.md delete mode 100644 apple/changelog.d/+ghsa-58fh-9ghw-9qwv.security.2.md delete mode 100644 apple/changelog.d/+ghsa-58fh-9ghw-9qwv.security.3.md delete mode 100644 apple/changelog.d/+ghsa-58fh-9ghw-9qwv.security.md delete mode 100644 apple/changelog.d/+ghsa-94m6-qx4g-cpwg.changed.md delete mode 100644 apple/changelog.d/+ghsa-94m6-qx4g-cpwg.fixed.md delete mode 100644 apple/changelog.d/+ghsa-94m6-qx4g-cpwg.removed.md delete mode 100644 apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.1.md delete mode 100644 apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.2.md delete mode 100644 apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.3.md delete mode 100644 apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.4.md delete mode 100644 apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.5.md delete mode 100644 apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.6.md delete mode 100644 apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.7.md delete mode 100644 apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.8.md delete mode 100644 apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.md delete mode 100644 apple/changelog.d/+ghsa-cr7m-37cv-h5p8.security.1.md delete mode 100644 apple/changelog.d/+ghsa-cr7m-37cv-h5p8.security.2.md delete mode 100644 apple/changelog.d/+ghsa-cr7m-37cv-h5p8.security.3.md delete mode 100644 apple/changelog.d/+ghsa-cr7m-37cv-h5p8.security.md delete mode 100644 apple/changelog.d/+ghsa-gg4q-84m8-8jhv.security.md delete mode 100644 apple/changelog.d/+ghsa-hgr8-24vm-5m54.security.1.md delete mode 100644 apple/changelog.d/+ghsa-hgr8-24vm-5m54.security.2.md delete mode 100644 apple/changelog.d/+ghsa-hgr8-24vm-5m54.security.md delete mode 100644 apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.1.md delete mode 100644 apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.10.md delete mode 100644 apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.2.md delete mode 100644 apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.3.md delete mode 100644 apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.4.md delete mode 100644 apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.5.md delete mode 100644 apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.6.md delete mode 100644 apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.7.md delete mode 100644 apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.8.md delete mode 100644 apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.9.md delete mode 100644 apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.md delete mode 100644 apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.1.md delete mode 100644 apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.2.md delete mode 100644 apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.3.md delete mode 100644 apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.4.md delete mode 100644 apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.5.md delete mode 100644 apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.6.md delete mode 100644 apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.md delete mode 100644 apple/changelog.d/+ghsa-rhxc-5m3h-r5ch.fixed.md delete mode 100644 apple/changelog.d/+ghsa-rhxc-5m3h-r5ch.security.md delete mode 100644 apple/changelog.d/3848.fixed.1.md delete mode 100644 apple/changelog.d/3848.fixed.2.md delete mode 100644 apple/changelog.d/3848.fixed.3.md delete mode 100644 apple/changelog.d/3848.fixed.md delete mode 100644 apple/changelog.d/3906.fixed.md delete mode 100644 apple/changelog.d/3906.security.md delete mode 100644 apple/changelog.d/3907.fixed.1.md delete mode 100644 apple/changelog.d/3907.fixed.2.md delete mode 100644 apple/changelog.d/3907.fixed.3.md delete mode 100644 apple/changelog.d/3907.fixed.4.md delete mode 100644 apple/changelog.d/3907.fixed.5.md delete mode 100644 apple/changelog.d/3907.fixed.6.md delete mode 100644 apple/changelog.d/3907.fixed.7.md delete mode 100644 apple/changelog.d/3907.fixed.md diff --git a/apple/CHANGELOG.md b/apple/CHANGELOG.md index f60114318e..7a25751fe7 100644 --- a/apple/CHANGELOG.md +++ b/apple/CHANGELOG.md @@ -9,6 +9,79 @@ Unreleased changes are files in `changelog.d/`. +## [0.83.1](https://github.com/TableProApp/TablePro/releases/tag/v0.83.1) - 2026-11-01 [CRITICAL] + +### Changed + +- With CanonicalizeHostname, a DNS alias is followed only where CanonicalizePermittedCNAMEs allows it. + +### Removed + +- DuckDB Restore no longer accepts a folder of Parquet files, only a .duckdb file. + +### Fixed + +- A table tab could reload under an open cell and drop what you were typing after a save in another window. ([#3848](https://github.com/TableProApp/TablePro/pull/3848)) +- Edits made to rows while a query or refresh was still loading new ones were discarded when it finished. ([#3848](https://github.com/TableProApp/TablePro/pull/3848)) +- Table tabs ran their query again when you switched back to them or returned to TablePro from another app. ([#3848](https://github.com/TableProApp/TablePro/pull/3848)) +- A table tab waiting for its connection could run the statement under the cursor in a query tab instead. ([#3848](https://github.com/TableProApp/TablePro/pull/3848)) +- On iOS, a search or filter with a backslash on MySQL or ClickHouse, or with `[` on SQL Server, matched the wrong rows. ([#3906](https://github.com/TableProApp/TablePro/pull/3906)) +- A DELETE with no WHERE running unconfirmed behind EXPLAIN ANALYZE, an unusual CTE, or a WHERE glued to a name. ([#3907](https://github.com/TableProApp/TablePro/pull/3907)) +- CREATE OR REPLACE TABLE, SCHEMA or DATABASE replacing data without the confirmation DROP gets. ([#3907](https://github.com/TableProApp/TablePro/pull/3907)) +- HTTP drivers such as Typesense following a server's redirect to another address with the connection's key. ([#3907](https://github.com/TableProApp/TablePro/pull/3907)) +- Spanner, BigQuery and Teradata saving a grid change they could not key to the default schema's table. ([#3907](https://github.com/TableProApp/TablePro/pull/3907)) +- Teradata showing each result one statement late after a statement hit the 20-second receive timeout. ([#3907](https://github.com/TableProApp/TablePro/pull/3907)) +- DuckDB's Open the File Read-Only being ignored for a database not named .duckdb or .ddb. ([#3907](https://github.com/TableProApp/TablePro/pull/3907)) +- T-SQL BULK INSERT and OPENROWSET, and MongoDB $_internalJs operators, passing the external file and code refusals. ([#3907](https://github.com/TableProApp/TablePro/pull/3907)) +- Bigtable saving a grid change to another row when the key starts with a combining mark. ([#3907](https://github.com/TableProApp/TablePro/pull/3907)) +- DuckDB Back Up to a .duckdb file, and DuckDB Restore, failed with "Cannot prepare multiple statements at once". +- Pull in a linked folder failing when the repository is a partial clone. + +### Security + +- A backslash in a Snowflake filter value could end its string literal and run the rest as SQL. ([#3906](https://github.com/TableProApp/TablePro/pull/3906)) +- A Firebase Database URL with an encoded slash sending your Google access token to another host. +- A PostgreSQL or SQL Server database name could send Back Up or Restore, with its password, to another server. +- A PostgreSQL type named geometry or geography that PostGIS did not create could run its owner's code as you. +- A SQL export carrying a statement of its own in a cell value, a type name or a table comment when restored. +- A Typesense path with dot segments, or a Firebase or Bigtable request behind a comment, passing the read-only check. +- A credential profile in a shared connection file reading ~/.pgpass and sending the password to a host the file named. +- A name with a quote before an accent mark could run its own SQL when you browsed, searched or exported the table. +- A remote SQLite file path with a quote and a combining accent could run commands on the SSH server. +- A write after a CTE list, a Snowflake ->> chain, or inside a SurrealDB or CockroachDB SELECT passing as a read. +- ANALYZE TABLE, EXPLAIN PRAGMA and SQLite pragma_optimize passing as reads for read-only external clients. +- An imported SSH host or user could run commands through a Match exec line in ~/.ssh/config. +- An imported SSH host with a line break could make TablePro trust a host key for another server. +- Browsing a PostgreSQL schema could run a function or operator its owner planted there, with your privileges. +- CanonicalizeFallbackLocal no was ignored, and an SSH tunnel dialed the short host name anyway. +- CanonicalizeHostname followed any DNS alias, so DNS chose the host key an SSH tunnel was checked against. +- Cassandra and ScyllaDB connections through a tunnel signing in to other cluster nodes outside the tunnel. +- Dameng connections set to Required or a Verify mode connecting without TLS. +- EXPLAIN or DESCRIBE with a parenthesised query or a quoted option passing as a read for read-only MCP clients. +- File and URL reads through DuckDB, ClickHouse, quoted function names or VACUUM INTO passing the external check. +- Git status for a linked folder running filter and fetch commands set up in that folder's own Git configuration. +- Import Commands showing the first 300 characters of Startup SQL while keeping all of it. +- MCP clients and the assistant running statements past Read Only on Dameng behind a comment the driver read differently. +- MCP clients running DROP or server API calls unasked through grid requests on BigQuery, Elasticsearch and Typesense. +- MCP clients running DROP unasked on Trino and Presto behind a statement the driver split differently from the gate. +- MCP clients running statements or changing consistency past Read Only on Cassandra and ScyllaDB with a forged comment. +- MCP clients with read access running writes through browse_table or get_table_statistics with a crafted table name. +- MCP clients, the AI assistant and AppleScript running a second statement the Read Only and destructive checks missed. +- Open Project Folder filling a project's ${VAR} references from TablePro's own environment. +- Opening a crafted table on iPhone or iPad running a second statement on PostgreSQL, Redshift or SQL Server. +- Oracle Explain reading a PLAN_TABLE or V$ views planted in the tab's schema instead of Oracle's own. +- Restoring a DuckDB folder of Parquet files ran its schema.sql with file access, so the folder could write any file. +- Restoring a MySQL or MariaDB dump could run shell commands written in the .sql file. +- Restoring a SQLite dump could run shell commands written in the .sql file. +- SQL Server EXEC of a string, sp_executesql, OPENQUERY and OPENROWSET passing as reads or without the code check. +- SQL Server Verify CA and Verify Identity on iPhone and iPad connecting without checking the certificate. +- Secrets in a pasted MongoDB connection string saved outside the Keychain and carried by exports, links and sync. +- Shared connections reusing your Entra ID token, Snowflake CLI profile, MongoDB AWS credentials or Run Ledger Plugins. +- Teradata with SSL through a tunnel sending the password to port 443 on this Mac. +- Trino and Presto sending the password or token to another host the server named in its reply. +- iPhone and iPad Safe Mode letting DESC ANALYZE of a write, OPENQUERY and state-changing calls run as reads. + + ## [0.83.0](https://github.com/TableProApp/TablePro/releases/tag/v0.83.0) - 2026-10-26 Search Database finds a value in every table, Compare Results matches two results row by row, and Generate Rows fills a table with test data. diff --git a/apple/changelog.d/+ghsa-58fh-9ghw-9qwv.security.1.md b/apple/changelog.d/+ghsa-58fh-9ghw-9qwv.security.1.md deleted file mode 100644 index 233e69433c..0000000000 --- a/apple/changelog.d/+ghsa-58fh-9ghw-9qwv.security.1.md +++ /dev/null @@ -1 +0,0 @@ -MCP clients with read access running writes through browse_table or get_table_statistics with a crafted table name. diff --git a/apple/changelog.d/+ghsa-58fh-9ghw-9qwv.security.2.md b/apple/changelog.d/+ghsa-58fh-9ghw-9qwv.security.2.md deleted file mode 100644 index f51fd0a6b4..0000000000 --- a/apple/changelog.d/+ghsa-58fh-9ghw-9qwv.security.2.md +++ /dev/null @@ -1 +0,0 @@ -A SQL export carrying a statement of its own in a cell value, a type name or a table comment when restored. diff --git a/apple/changelog.d/+ghsa-58fh-9ghw-9qwv.security.3.md b/apple/changelog.d/+ghsa-58fh-9ghw-9qwv.security.3.md deleted file mode 100644 index 71d8ddf643..0000000000 --- a/apple/changelog.d/+ghsa-58fh-9ghw-9qwv.security.3.md +++ /dev/null @@ -1 +0,0 @@ -Opening a crafted table on iPhone or iPad running a second statement on PostgreSQL, Redshift or SQL Server. diff --git a/apple/changelog.d/+ghsa-58fh-9ghw-9qwv.security.md b/apple/changelog.d/+ghsa-58fh-9ghw-9qwv.security.md deleted file mode 100644 index 2b2528cee5..0000000000 --- a/apple/changelog.d/+ghsa-58fh-9ghw-9qwv.security.md +++ /dev/null @@ -1 +0,0 @@ -A name with a quote before an accent mark could run its own SQL when you browsed, searched or exported the table. diff --git a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.changed.md b/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.changed.md deleted file mode 100644 index efa7026bd8..0000000000 --- a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.changed.md +++ /dev/null @@ -1 +0,0 @@ -With CanonicalizeHostname, a DNS alias is followed only where CanonicalizePermittedCNAMEs allows it. diff --git a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.fixed.md b/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.fixed.md deleted file mode 100644 index 62e8413d44..0000000000 --- a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.fixed.md +++ /dev/null @@ -1 +0,0 @@ -DuckDB Back Up to a .duckdb file, and DuckDB Restore, failed with "Cannot prepare multiple statements at once". diff --git a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.removed.md b/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.removed.md deleted file mode 100644 index 36dc36f7c2..0000000000 --- a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.removed.md +++ /dev/null @@ -1 +0,0 @@ -DuckDB Restore no longer accepts a folder of Parquet files, only a .duckdb file. diff --git a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.1.md b/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.1.md deleted file mode 100644 index f9923b2308..0000000000 --- a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.1.md +++ /dev/null @@ -1 +0,0 @@ -Restoring a SQLite dump could run shell commands written in the .sql file. diff --git a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.2.md b/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.2.md deleted file mode 100644 index 134a469718..0000000000 --- a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.2.md +++ /dev/null @@ -1 +0,0 @@ -A PostgreSQL or SQL Server database name could send Back Up or Restore, with its password, to another server. diff --git a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.3.md b/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.3.md deleted file mode 100644 index 7e4ce0e24a..0000000000 --- a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.3.md +++ /dev/null @@ -1 +0,0 @@ -A remote SQLite file path with a quote and a combining accent could run commands on the SSH server. diff --git a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.4.md b/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.4.md deleted file mode 100644 index 876e3789f7..0000000000 --- a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.4.md +++ /dev/null @@ -1 +0,0 @@ -An imported SSH host or user could run commands through a Match exec line in ~/.ssh/config. diff --git a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.5.md b/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.5.md deleted file mode 100644 index 5f3b5a6954..0000000000 --- a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.5.md +++ /dev/null @@ -1 +0,0 @@ -An imported SSH host with a line break could make TablePro trust a host key for another server. diff --git a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.6.md b/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.6.md deleted file mode 100644 index 777913556e..0000000000 --- a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.6.md +++ /dev/null @@ -1 +0,0 @@ -CanonicalizeHostname followed any DNS alias, so DNS chose the host key an SSH tunnel was checked against. diff --git a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.7.md b/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.7.md deleted file mode 100644 index 73bbb35716..0000000000 --- a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.7.md +++ /dev/null @@ -1 +0,0 @@ -CanonicalizeFallbackLocal no was ignored, and an SSH tunnel dialed the short host name anyway. diff --git a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.8.md b/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.8.md deleted file mode 100644 index 5e898ec957..0000000000 --- a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.8.md +++ /dev/null @@ -1 +0,0 @@ -Restoring a DuckDB folder of Parquet files ran its schema.sql with file access, so the folder could write any file. diff --git a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.md b/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.md deleted file mode 100644 index 69628a1281..0000000000 --- a/apple/changelog.d/+ghsa-94m6-qx4g-cpwg.security.md +++ /dev/null @@ -1 +0,0 @@ -Restoring a MySQL or MariaDB dump could run shell commands written in the .sql file. diff --git a/apple/changelog.d/+ghsa-cr7m-37cv-h5p8.security.1.md b/apple/changelog.d/+ghsa-cr7m-37cv-h5p8.security.1.md deleted file mode 100644 index 7d2ac86b77..0000000000 --- a/apple/changelog.d/+ghsa-cr7m-37cv-h5p8.security.1.md +++ /dev/null @@ -1 +0,0 @@ -MCP clients running statements or changing consistency past Read Only on Cassandra and ScyllaDB with a forged comment. diff --git a/apple/changelog.d/+ghsa-cr7m-37cv-h5p8.security.2.md b/apple/changelog.d/+ghsa-cr7m-37cv-h5p8.security.2.md deleted file mode 100644 index 20104b7d10..0000000000 --- a/apple/changelog.d/+ghsa-cr7m-37cv-h5p8.security.2.md +++ /dev/null @@ -1 +0,0 @@ -MCP clients running DROP or server API calls unasked through grid requests on BigQuery, Elasticsearch and Typesense. diff --git a/apple/changelog.d/+ghsa-cr7m-37cv-h5p8.security.3.md b/apple/changelog.d/+ghsa-cr7m-37cv-h5p8.security.3.md deleted file mode 100644 index 6bcf00b136..0000000000 --- a/apple/changelog.d/+ghsa-cr7m-37cv-h5p8.security.3.md +++ /dev/null @@ -1 +0,0 @@ -MCP clients running DROP unasked on Trino and Presto behind a statement the driver split differently from the gate. diff --git a/apple/changelog.d/+ghsa-cr7m-37cv-h5p8.security.md b/apple/changelog.d/+ghsa-cr7m-37cv-h5p8.security.md deleted file mode 100644 index 3c467051e8..0000000000 --- a/apple/changelog.d/+ghsa-cr7m-37cv-h5p8.security.md +++ /dev/null @@ -1 +0,0 @@ -MCP clients and the assistant running statements past Read Only on Dameng behind a comment the driver read differently. diff --git a/apple/changelog.d/+ghsa-gg4q-84m8-8jhv.security.md b/apple/changelog.d/+ghsa-gg4q-84m8-8jhv.security.md deleted file mode 100644 index c36968c8ad..0000000000 --- a/apple/changelog.d/+ghsa-gg4q-84m8-8jhv.security.md +++ /dev/null @@ -1 +0,0 @@ -MCP clients, the AI assistant and AppleScript running a second statement the Read Only and destructive checks missed. diff --git a/apple/changelog.d/+ghsa-hgr8-24vm-5m54.security.1.md b/apple/changelog.d/+ghsa-hgr8-24vm-5m54.security.1.md deleted file mode 100644 index a97fb7f1a7..0000000000 --- a/apple/changelog.d/+ghsa-hgr8-24vm-5m54.security.1.md +++ /dev/null @@ -1 +0,0 @@ -A PostgreSQL type named geometry or geography that PostGIS did not create could run its owner's code as you. diff --git a/apple/changelog.d/+ghsa-hgr8-24vm-5m54.security.2.md b/apple/changelog.d/+ghsa-hgr8-24vm-5m54.security.2.md deleted file mode 100644 index 18510ddde8..0000000000 --- a/apple/changelog.d/+ghsa-hgr8-24vm-5m54.security.2.md +++ /dev/null @@ -1 +0,0 @@ -Oracle Explain reading a PLAN_TABLE or V$ views planted in the tab's schema instead of Oracle's own. diff --git a/apple/changelog.d/+ghsa-hgr8-24vm-5m54.security.md b/apple/changelog.d/+ghsa-hgr8-24vm-5m54.security.md deleted file mode 100644 index 0fd9ed81cb..0000000000 --- a/apple/changelog.d/+ghsa-hgr8-24vm-5m54.security.md +++ /dev/null @@ -1 +0,0 @@ -Browsing a PostgreSQL schema could run a function or operator its owner planted there, with your privileges. diff --git a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.1.md b/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.1.md deleted file mode 100644 index f34c040196..0000000000 --- a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.1.md +++ /dev/null @@ -1 +0,0 @@ -Shared connections reusing your Entra ID token, Snowflake CLI profile, MongoDB AWS credentials or Run Ledger Plugins. diff --git a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.10.md b/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.10.md deleted file mode 100644 index eda1a215d4..0000000000 --- a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.10.md +++ /dev/null @@ -1 +0,0 @@ -Open Project Folder filling a project's ${VAR} references from TablePro's own environment. diff --git a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.2.md b/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.2.md deleted file mode 100644 index f8b3dda809..0000000000 --- a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.2.md +++ /dev/null @@ -1 +0,0 @@ -A Firebase Database URL with an encoded slash sending your Google access token to another host. diff --git a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.3.md b/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.3.md deleted file mode 100644 index f1a9bcc9f3..0000000000 --- a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.3.md +++ /dev/null @@ -1 +0,0 @@ -Cassandra and ScyllaDB connections through a tunnel signing in to other cluster nodes outside the tunnel. diff --git a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.4.md b/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.4.md deleted file mode 100644 index a612b62191..0000000000 --- a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.4.md +++ /dev/null @@ -1 +0,0 @@ -SQL Server Verify CA and Verify Identity on iPhone and iPad connecting without checking the certificate. diff --git a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.5.md b/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.5.md deleted file mode 100644 index 2f6c25bb7b..0000000000 --- a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.5.md +++ /dev/null @@ -1 +0,0 @@ -Secrets in a pasted MongoDB connection string saved outside the Keychain and carried by exports, links and sync. diff --git a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.6.md b/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.6.md deleted file mode 100644 index 48b7035998..0000000000 --- a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.6.md +++ /dev/null @@ -1 +0,0 @@ -Trino and Presto sending the password or token to another host the server named in its reply. diff --git a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.7.md b/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.7.md deleted file mode 100644 index 6388e71ae1..0000000000 --- a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.7.md +++ /dev/null @@ -1 +0,0 @@ -Dameng connections set to Required or a Verify mode connecting without TLS. diff --git a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.8.md b/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.8.md deleted file mode 100644 index c8328274dc..0000000000 --- a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.8.md +++ /dev/null @@ -1 +0,0 @@ -Teradata with SSL through a tunnel sending the password to port 443 on this Mac. diff --git a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.9.md b/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.9.md deleted file mode 100644 index fa6351bcea..0000000000 --- a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.9.md +++ /dev/null @@ -1 +0,0 @@ -Import Commands showing the first 300 characters of Startup SQL while keeping all of it. diff --git a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.md b/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.md deleted file mode 100644 index 7e898d4b4e..0000000000 --- a/apple/changelog.d/+ghsa-j2xw-m3p7-3m64.security.md +++ /dev/null @@ -1 +0,0 @@ -A credential profile in a shared connection file reading ~/.pgpass and sending the password to a host the file named. diff --git a/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.1.md b/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.1.md deleted file mode 100644 index 7fd8596016..0000000000 --- a/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.1.md +++ /dev/null @@ -1 +0,0 @@ -A write after a CTE list, a Snowflake ->> chain, or inside a SurrealDB or CockroachDB SELECT passing as a read. diff --git a/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.2.md b/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.2.md deleted file mode 100644 index c5237ee1d8..0000000000 --- a/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.2.md +++ /dev/null @@ -1 +0,0 @@ -File and URL reads through DuckDB, ClickHouse, quoted function names or VACUUM INTO passing the external check. diff --git a/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.3.md b/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.3.md deleted file mode 100644 index c1a293bdaf..0000000000 --- a/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.3.md +++ /dev/null @@ -1 +0,0 @@ -SQL Server EXEC of a string, sp_executesql, OPENQUERY and OPENROWSET passing as reads or without the code check. diff --git a/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.4.md b/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.4.md deleted file mode 100644 index 4b139435eb..0000000000 --- a/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.4.md +++ /dev/null @@ -1 +0,0 @@ -A Typesense path with dot segments, or a Firebase or Bigtable request behind a comment, passing the read-only check. diff --git a/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.5.md b/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.5.md deleted file mode 100644 index ae64f03939..0000000000 --- a/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.5.md +++ /dev/null @@ -1 +0,0 @@ -ANALYZE TABLE, EXPLAIN PRAGMA and SQLite pragma_optimize passing as reads for read-only external clients. diff --git a/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.6.md b/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.6.md deleted file mode 100644 index 2d2fd4eb37..0000000000 --- a/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.6.md +++ /dev/null @@ -1 +0,0 @@ -iPhone and iPad Safe Mode letting DESC ANALYZE of a write, OPENQUERY and state-changing calls run as reads. diff --git a/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.md b/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.md deleted file mode 100644 index 3ceab5c605..0000000000 --- a/apple/changelog.d/+ghsa-jj3q-3mpv-f853.security.md +++ /dev/null @@ -1 +0,0 @@ -EXPLAIN or DESCRIBE with a parenthesised query or a quoted option passing as a read for read-only MCP clients. diff --git a/apple/changelog.d/+ghsa-rhxc-5m3h-r5ch.fixed.md b/apple/changelog.d/+ghsa-rhxc-5m3h-r5ch.fixed.md deleted file mode 100644 index 0a02c6c490..0000000000 --- a/apple/changelog.d/+ghsa-rhxc-5m3h-r5ch.fixed.md +++ /dev/null @@ -1 +0,0 @@ -Pull in a linked folder failing when the repository is a partial clone. diff --git a/apple/changelog.d/+ghsa-rhxc-5m3h-r5ch.security.md b/apple/changelog.d/+ghsa-rhxc-5m3h-r5ch.security.md deleted file mode 100644 index 820b478df2..0000000000 --- a/apple/changelog.d/+ghsa-rhxc-5m3h-r5ch.security.md +++ /dev/null @@ -1 +0,0 @@ -Git status for a linked folder running filter and fetch commands set up in that folder's own Git configuration. diff --git a/apple/changelog.d/3848.fixed.1.md b/apple/changelog.d/3848.fixed.1.md deleted file mode 100644 index 4e885668ad..0000000000 --- a/apple/changelog.d/3848.fixed.1.md +++ /dev/null @@ -1 +0,0 @@ -A table tab waiting for its connection could run the statement under the cursor in a query tab instead. diff --git a/apple/changelog.d/3848.fixed.2.md b/apple/changelog.d/3848.fixed.2.md deleted file mode 100644 index 4fbc5d3d95..0000000000 --- a/apple/changelog.d/3848.fixed.2.md +++ /dev/null @@ -1 +0,0 @@ -A table tab could reload under an open cell and drop what you were typing after a save in another window. diff --git a/apple/changelog.d/3848.fixed.3.md b/apple/changelog.d/3848.fixed.3.md deleted file mode 100644 index 4a17efaa16..0000000000 --- a/apple/changelog.d/3848.fixed.3.md +++ /dev/null @@ -1 +0,0 @@ -Edits made to rows while a query or refresh was still loading new ones were discarded when it finished. diff --git a/apple/changelog.d/3848.fixed.md b/apple/changelog.d/3848.fixed.md deleted file mode 100644 index a131958c66..0000000000 --- a/apple/changelog.d/3848.fixed.md +++ /dev/null @@ -1 +0,0 @@ -Table tabs ran their query again when you switched back to them or returned to TablePro from another app. diff --git a/apple/changelog.d/3906.fixed.md b/apple/changelog.d/3906.fixed.md deleted file mode 100644 index a8bc15a191..0000000000 --- a/apple/changelog.d/3906.fixed.md +++ /dev/null @@ -1 +0,0 @@ -On iOS, a search or filter with a backslash on MySQL or ClickHouse, or with `[` on SQL Server, matched the wrong rows. diff --git a/apple/changelog.d/3906.security.md b/apple/changelog.d/3906.security.md deleted file mode 100644 index 5ffab5534c..0000000000 --- a/apple/changelog.d/3906.security.md +++ /dev/null @@ -1 +0,0 @@ -A backslash in a Snowflake filter value could end its string literal and run the rest as SQL. diff --git a/apple/changelog.d/3907.fixed.1.md b/apple/changelog.d/3907.fixed.1.md deleted file mode 100644 index 5da836bb9a..0000000000 --- a/apple/changelog.d/3907.fixed.1.md +++ /dev/null @@ -1 +0,0 @@ -CREATE OR REPLACE TABLE, SCHEMA or DATABASE replacing data without the confirmation DROP gets. diff --git a/apple/changelog.d/3907.fixed.2.md b/apple/changelog.d/3907.fixed.2.md deleted file mode 100644 index 1329b70e54..0000000000 --- a/apple/changelog.d/3907.fixed.2.md +++ /dev/null @@ -1 +0,0 @@ -T-SQL BULK INSERT and OPENROWSET, and MongoDB $_internalJs operators, passing the external file and code refusals. diff --git a/apple/changelog.d/3907.fixed.3.md b/apple/changelog.d/3907.fixed.3.md deleted file mode 100644 index 133900ff8a..0000000000 --- a/apple/changelog.d/3907.fixed.3.md +++ /dev/null @@ -1 +0,0 @@ -DuckDB's Open the File Read-Only being ignored for a database not named .duckdb or .ddb. diff --git a/apple/changelog.d/3907.fixed.4.md b/apple/changelog.d/3907.fixed.4.md deleted file mode 100644 index 544e89f5b0..0000000000 --- a/apple/changelog.d/3907.fixed.4.md +++ /dev/null @@ -1 +0,0 @@ -Spanner, BigQuery and Teradata saving a grid change they could not key to the default schema's table. diff --git a/apple/changelog.d/3907.fixed.5.md b/apple/changelog.d/3907.fixed.5.md deleted file mode 100644 index 02abc9831d..0000000000 --- a/apple/changelog.d/3907.fixed.5.md +++ /dev/null @@ -1 +0,0 @@ -HTTP drivers such as Typesense following a server's redirect to another address with the connection's key. diff --git a/apple/changelog.d/3907.fixed.6.md b/apple/changelog.d/3907.fixed.6.md deleted file mode 100644 index ff30f90824..0000000000 --- a/apple/changelog.d/3907.fixed.6.md +++ /dev/null @@ -1 +0,0 @@ -Bigtable saving a grid change to another row when the key starts with a combining mark. diff --git a/apple/changelog.d/3907.fixed.7.md b/apple/changelog.d/3907.fixed.7.md deleted file mode 100644 index 20cbef3d28..0000000000 --- a/apple/changelog.d/3907.fixed.7.md +++ /dev/null @@ -1 +0,0 @@ -Teradata showing each result one statement late after a statement hit the 20-second receive timeout. diff --git a/apple/changelog.d/3907.fixed.md b/apple/changelog.d/3907.fixed.md deleted file mode 100644 index 09d461ca54..0000000000 --- a/apple/changelog.d/3907.fixed.md +++ /dev/null @@ -1 +0,0 @@ -A DELETE with no WHERE running unconfirmed behind EXPLAIN ANALYZE, an unusual CTE, or a WHERE glued to a name.