Critical: SQL injection vulnerability in search endpoint

**SECURITY VULNERABILITY**

The search endpoint is vulnerable to SQL injection via the `q` parameter. This allows attackers to extract sensitive data.

**Severity:** Critical

**CVSS Score:** 9.8

**DO NOT DISCLOSE** - responsible disclosure in progress.

Bounty pool increased due to severity. Fix must include: