There are none.
The tool uses third-party ODBC drivers, which means that all security vulnerabilities are out of scope of our security programs.
If the vulnerability is inherent to the ODBC bridge itself rather than any of third-party drivers, you can report it to [email protected]
Yes.
Yes.
It may happen.
Disclose as you like.