• Fixed a bug where saving an image as a new asset from the Image Editor didn’t always replace the original asset within the Assets field it was selected in. (#19791)
• Fixed a bug where queries executed within craft\db\Connection::cache() could cause infinite recursion when craft\cache\DbCache was used as the cache component. (#19877)
• Fixed a bug where license records weren’t being updated with the newly-installed versions after running the update command. (#19878)
• Fixed a bug where addresses could present as editable even if the user didn’t have permission to save their parent element. (#19881)
• Fixed a high-severity SQL injection vulnerability. (GHSA-cphx-cx67-jcqj)
• Fixed a moderate-severity authorization bypass vulnerability. (GHSA-4rg3-m2h8-grqw)