5.0.43 (2026-03-21) Bug Fixes authentication-oauth: prevent open redirect via domain suffix attack (#3669) (9905f9f) authentication-oauth: Use actual URL origin comparison for origin check (#3676) (32f04d0) mongodb: Block $rename operator in _patch data by default (CWE-943) (#3665) (0526ffd)