• Check customer visibility in load_customer_info ajax action (Security: GHSA-cr68-27qv-p5m4)
• Restricted access to Assigned Conversations option in user profiles (GHSA-m4hc-rc98-38jc)
• Change customer when received a reply to a conversation from completely new email address (Security: GHSA-j49f-9g94-3wh4)
• Tighten throttling in Forgot Password requests (GHSA-jvmv-2qcp-7855)
• Allow to define PHP path via PHP_PATH .env parameter for tools.php script (#5507)
• Update customer in threads when merging customers (#5505)
• Do not allow to send reply till all uploads finished (#5515)
• Create a new conversation for email notifications forwarded to another mailbox (#4515)
• Fixed missing space in browser push notifications (#5520)
• Show warning on Status page when HTTPS is used but SESSION_SECURE_COOKIE=true is not set.
• Make Shebang generic in update.sh and install.sh (#5521)