Vulnerabilities in Drupal 8.6.10