Vulnerabilities in Drupal 8.6.0 rc1