- Fixed high‑severity Okta integration escalation vulnerability by enforcing required OAuth scopes during plugin creation/update
- Patched medium‑severity PKINIT issue that could allow host file overwrites via Kerberos authentication
- Resolved multiple bugs including UI rendering errors, Prometheus metric formatting, BotInstance timestamp display, Windows hardware‑key PIN timeout, db CLI allowed‑users listing, and OpenSearch discovery failures