8.6.48 (2026-03-16) Bug Fixes Password reset token single-use bypass via concurrent requests (GHSA-r3xq-68wh-gwvh) (#10217) (83b4de0)