Drupal has released security advisories to address multiple vulnerabilities in the Drupal products. The list of security update can be found at:
https://www.drupal.org/sa-core-2023-002
https://www.drupal.org/sa-core-2023-003
https://www.drupal.org/sa-core-2023-004
Please note that Drupal 8 and Drupal 9 prior to version 9.4.x have reached End-Of-Life (EOL). No security updates will be provided after that. Users should arrange upgrading the Drupal to supported versions or migrating to other supported technology.
Successful exploitation could lead to information disclosure or security restriction bypass on an affected system.
The product vendor has released patches to address the issues.