8.6.40 (2026-03-12) Bug Fixes GraphQL WebSocket endpoint bypasses security middleware (GHSA-p2x3-8689-cwpg) (#10190) (21330d1)