4.7.2 (2026-03-19) Bug Fixes password reset tokens now expire after 60 minutes (90bb618) vulnerability would allow to bypass 2fa (#1021) (90bb618)