Fix/change: column names can only contain numbers, a-z, A-Z letters and underscore. Once a report is edited and bad column names exist, they are auto-renamed to correct format. You need to update the column names in SELECT clause of SQL query to match the new correct names. Remember, you can use column Heading property for displayed column heading which can include any chars.
We were notified about possible SQL injection and applied a patch.
Please note that we don't have any clear evidence of successful attacks and the issue is potentially only related to sh404sef component used together with the bridge.
We were not able to reproduce the issue with the current version, but anyway, it's better to upgrade.