1. Critical SQL Injection Flaw in /users Endpoint Allows Full Database Exposure
A security audit has identified a critical SQL injection vulnerability in the `/users` endpoint of the affected application, allowing attackers to retrieve all database records by exploiting unsanitized query parameters. The flaw, rated Critical with a CVSS score of 9.8, affects all versions from v1.0.0 through v1.2.0 ...