[CRITICAL] Critical - Arbitrary PHP code execution

PKSA-v12n-s3v9-h238 CVE-2019-6339 GHSA-8cw5-rv98-5c46

Affected package: drupal/drupal

Affected version: >=7.0.0,<7.62.0|>=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.4.0|>=8.4.0,<8.5.0|>=8.5.0,<8.5.9|>=8.6.0,<8.6.6

Reported by:
FriendsOfPHP/security-advisories, GitHub