[Koha-bugs] [Bug 42360] [CVE-2026-70369] SQL Injection in reports/acquisitions_stats.pl via Filter parameter