Threats affecting pkg:github/Keep

Keep versions 0.34.10 through 0.55.0 contain a blind SQL injection vulnerability in the CEL-to-SQL converter. Authenticated users with read:alert permission can exploit this flaw by submitting crafted CEL expressions to specific endpoints, allowing them to extract other tenants' alerts and password hashes via a boolean oracle technique.