cybersecurity CVSS 10 bug in LLM-to-SQL library highlights prompt injection risks , and Ed Targett June 27, 2024