8.6.22 (2026-03-08) Bug Fixes Parse Server OAuth2 authentication adapter account takeover via identity spoofing (GHSA-fr88-w35c-r596) (#10146) (238110b)