CVE-2026-129166

Keep versions 0.34.10 through 0.55.0 are vulnerable to a blind SQL injection in the CEL-to-SQL converter . The root cause is the insertion of unescaped bracket-indexed JSON keys from CEL filters into JSON path expressions for SQLite, PostgreSQL, and MySQL . Authenticated users with read:alert per...