Drupal has released security updates to address vulnerabilities affecting Drupal 9.3 and 9.4. An attacker could exploit some of these vulnerabilities to take control of an affected system.
Therefore, Bhutan Computer Incident Response Team recommends users and administrators to review Drupal security advisory SA-CORE-2022-015 and apply the necessary update.