8.6.38 (2026-03-11) Bug Fixes Account takeover via operator injection in authentication data identifier (GHSA-5fw2-8jcv-xh87) (#10186) (93425df)