The Media Library module has a security vulnerability whereby it doesn't sufficiently restrict access to media items in certain configurations.
{ "constraint": ">= 8.0.0 <8.7.11" }
{ "constraint": ">= 8.8.0 <8.8.1" }
">= 8.0.0 <8.7.11 || >= 8.8.0 <8.8.1"
"https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/core/DRUPAL-CORE-2019-011.json"