Drupal Core – Critical – Multiple Vulnerabilities – SA-CORE-2018-001 (drupal.org)

This is a vulnerability from earlier this year. This is not the security release dropping today.