5.4.3 (2026-08-15) Bug Fixes security: block IPv6 transition addresses in SSRF guard (44e3b62) security: rate limit totp verification (44e3b62) security: stream database backups instead of writing them to the web root (44e3b62) security: unsafe zip extraction during db restore (44e3b62)