This is a security release. Upgrading is strongly recommended. Details are published in the security advisories for this release. After upgrading, clear caches (drush cr). No database updates are required.
This release fixes a security vulnerability. See the security advisory for details.
It also fixes a bug where the "Generate internal links" dialog would fail with a server error for every user.
Security issues fixed
Xray Audit - Moderately critical - Access bypass - CVE-2026-96389
Bugs