8.6.14 (2026-03-07) Bug Fixes NoSQL injection via token type in password reset and email verification endpoints (GHSA-vgjh-hmwf-c588) (#10129) (88eed83)