Drupal has published a security advisory, highlighting vulnerabilities in multiple versions of its products below on 17th of November 2021. It is recommended that you take the necessary precautions by ensuring your products are always updated.
Drupal 9.2
Drupal 9.1
Drupal 8.9
For more information on these updates, you can follow these URLs:
https://www.drupal.org/project/drupal/releases/9.2.9
https://www.drupal.org/project/drupal/releases/9.1.14
https://www.drupal.org/project/drupal/releases/8.9.20
The Guyana National CIRT recommends that users and administrators review these updates and apply them where necessary.
PDF Download: Drupal Releases Security Updates.pdf
References
Drupal releases security updates (17th November 2021). Retrieved from Drupal.
Drupal releases security updates (18th November 2021). Retrieved from Cybersecurity & Infrastructure Security Agency.
https://us-cert.cisa.gov/ncas/current-activity/2021/11/18/drupal-releases- security-updates