Security announcements

MSA-12-0034: Potential SQL injection issue