Koha: SQL Injection in reports/acquisitions_stats.pl (CVE-2026-70369) | HOL Guard CVE