GHSA-v895-833r-8c45: Fleet's Apple MDM profile delivery has second-order SQL Injection that can compromise the database

Fleet's Apple MDM profile delivery system has a critical second-order SQL injection vulnerability (a flaw where user input is stored safely first, but then later inserted directly into SQL code without protection), allowing an attacker with an enrolled device to steal or modify sensitive database contents like passwords and API tokens. The vulnerability only affects Fleet instances where Apple MDM is enabled, and exploitation requires a valid MDM enrollment certificate.