The Drupal Security Team announced on February 23rd 2022, a moderately critical Cross-Site Scripting (XSS) vulnerability in the Entity Reference Tree Widget module SA-CONTRIB-2022-026.
The Drupal Core Development team has announced that the PHP platform requirements for Drupal 10.0.0 will be announced at least five months before its release.
Drupal 10.0.0-alpha 1 Version has been released! This release is not meant for production but the testing phase. It also shows the release of the major version is right on track!