Updated: Drupal fixes two critical RCE flaws, including Entity List module

Alongside CVE-2026-108097 in Field UI, Drupal fixed a separate critical RCE vulnerability, CVE-2026-108099, in the Entity List module. Affected websites should update the module to version 3.0.10.
