The vulnerability fixed in version 0.65.5 is: when the requested table name contains a trailing newline character at the end, it is possible to bypass table-level permission checks and expose private row data that should be protected.