[MEDIUM] Contextual Links validation - Critical - Remote Code Execution

PKSA-mkhd-5d73-ftb7 GHSA-6gf6-24h2-66j4

Affected package: drupal/core

Affected version: >=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.4.0|>=8.4.0,<8.5.0|>=8.5.0,<8.5.8|>=8.6.0,<8.6.2

Reported by:
FriendsOfPHP/security-advisories, GitHub