Vulnerabilities in Drupal 8.6.0 alpha1