https://www.cisa.gov/uscert/ncas/current-activity/2022/03/22/drupal-releases-security-updates
Drupal has released security updates to address a vulnerability affecting Drupal 9.2 and 9.3. An attacker could exploit this vulnerability to take control of an affected system.
CISA encourages users and administrators to review Drupal Security Advisory SA-CORE-006 and apply the necessary update.