A security update was recently released for a third-party library called Symfony, which is included in the Drupal project. Vulnerability in the above library could allow a bypass of security settings.