A SQL injection vulnerability exists in various API endpoints, including offices and dashboards, which allows an authenticated attacker to inject malicious data into some of the query parameters of the REST API endpoints. This issue is resolved in version 1.10.1, which includes a SQL Validator to configure tests and checks against SQL queries, protecting against potential SQL injection attacks.