A critical security update for Drupal Core will be released on the evening of Wednesday, May 20. Admins should install it quickly.