The third feature release of Drupal 9 introduces experimental support for CKEditor 5, makes the Olivero theme stable and introduces various content editor and developer improvements.
CKEditor has released a security update SA- Core-2021-011 that impacts Drupal. The issue, dated November 17, 2021, is classified as a moderately critical cross-site scripting (XSS) vulnerability.
