WordPress 6.4.2 is rolling out. It includes 7 bug fixes and 1 security update. The explanation for the security item is:
“A Remote Code Execution vulnerability that is not directly exploitable in core, however the security team feels that there is a potential for high severity when combined with some plugins, especially in multisite installs.”