"Some field types do not properly sanitize data from non-form sources. This can lead to arbitrary PHP code execution in some cases." Please read the full page on this and determine if you need to update your site immediately.
url:
https://www.drupal.org/sa-core-2019-003
376