CVE-2019-6342

An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled.
This can be mitigated by disabling the Workspaces module. It does not affect any release other than Drupal 8.7.4.

Source: CVE-2019-6342