Drupal Core security advisory (SA-CORE-2026-004)