Merge commit from fork

* Fix GHSA-7jvv-fhmg-wpfw

* Fix GHSA-hx34-2pfw-2qfj

* Fix GHSA-vwhj-3g83-v276

* Bump version to v4.6.4

app/controllers/api/v1/admin/measures_controller.rb

@@ -17,9 +17,9 @@ class Api::V1::Admin::MeasuresController < Api::BaseController
 
   def set_measures
     @measures = Admin::Metrics::Measure.retrieve(
-      params[:keys],
-      params[:start_at],
-      params[:end_at],
+      params.require(:keys),
+      params.require(:start_at),
+      params.require(:end_at),
       params
     )
   end