Drupal critical update to fix bug with high exploitation risk (opens in new tab)

Drupal has announced a "core security release" scheduled for later today, warning that threat actors might develop exploits within hours of the update disclosure. [...]