9.10.3-alpha.1 (2026-10-04) Bug Fixes Session creation endpoint bypasses create and addField class-level permissions (GHSA-gj37-5hg5-p729) (#10744) (ef08e80)