8.6.66 (2026-03-27) Bug Fixes GraphQL API endpoint ignores CORS origin restriction (GHSA-q3p6-g7c4-829c) (#10335) (0347641)