Kestra versions 1.3.3 and earlier contain a SQL Injection vulnerability due to unsafe concatenation of user input from a GET parameter into SQL queries without proper sanitization. This flaw allows attackers to inject arbitrary SQL code, potentially leading to full compromise of confidentiality, integrity, and availability of the database.