GHSA-f3wp-xpv2-6vmg: silverstripe/framework password encryption salt not updated

The vulnerability stems from the missing salt reset in the Member model's pre-write hook. The patch adds 'this->Salt = '';' in onBeforeWrite() when password changes are detected. This method handles password encryption logic, and the absence of salt reset in vulnerable versions meant user-specific encryption parameters weren't refreshed, leaving persistent authentication tokens valid despite password changes. The direct correlation between the fix location and vulnerability description confirms this as the vulnerable function.