This content is viewable by Everyone
Critical Vulnerabilities in Drupal Core
Drupal has released Critical security updates to address vulnerabilities in Twig impacting Drupal core. A remote attacker could exploit these vulnerabilities to perform unauthorized read access to private files, the contents of other files on the server, or database credentials.
For a complete description of the vulnerabilities and affected systems go to Drupal core - Critical - Multiple vulnerabilities - SA-CORE-2022-016.