Drupal has released a moderately critical security update to address vulnerabilities affecting Drupal versions 8.7.x and 8.8.x. It is recommended that you take the necessary precautions by ensuring your products are always updated:
The Guyana National CIRT recommends users and administration to review these updates and to apply where necessary.
References