You found it. We fixed it.

• An issue was reported where a user could request to join a Group hub as another user via HTTP request. We have now added an enhanced validation for the user ID in the request preventing a user from tampering with the HTTP request. 
  
  
• Previously Image Attachment Migration service did not include attachments from private boards and deleted users. This is fixed now. The service now includes attachments from private boards and deleted users while migrating attachments to inline images.