Vulnerabilities in Drupal 8.6.12