8.6.98 (2026-10-04) Bug Fixes Session creation endpoint bypasses create and addField class-level permissions (GHSA-gj37-5hg5-p729) (#10745) (019b4a4)