Drupal announced a scheduled core security release for today, warning that threat actors could develop exploits within hours of the update becoming public.
This is an ingested summary. Full reporting is available at the primary source below.