Fixes Linky Revision UI - Moderately critical - Access bypass - SA-CONTRIB-2021-016.
Fixes Block Content Revision UI - Moderately critical - Access bypass - SA-CONTRIB-2021-017.
Changes since 8.x-3.6:
Chaos Tool Suite (ctools) - Moderately critical - Access bypass - SA-CONTRIB-2021-015.
Security release of GraphQL fixing a minor information disclosure vulnerability, see GraphQL - Moderately critical - Information Disclosure - SA-CONTRIB-2021-013.
Changes since 8.x-1.0:
OpenID Connect / OAuth client - Moderately critical - Access bypass - SA-CONTRIB-2021-014