Drupal critical update to fix bug with high exploitation risk