The Drupal development team released versions 7.69, 8.7.11 and 8.8.1, which address several vulnerabilities, including a serious file processing issue. The most serious issue is related to the Archive_Tar third-party library, it has been assigned a severity rating of critical. The vulnerability has been reported by Jasper Mattsson from the Drupal team. The other vulnerabilities addressed by Drupal developers are:. The issues, rated as moderately critical, affect versions 87.x and 88.x versions.”]
Source: https://securityaffairs.co/wordpress/95393/security/drupal-vulnerabilities-2.html