Two security patches are being merged (Jenkins is processing now) for
TextExtracts and Flow:
https://gerrit.wikimedia.org/r/#/c/229039/
https://gerrit.wikimedia.org/r/#/c/229040/
It is recommended to upgrade to these if possible. There is a
vulnerability if you are running both TextExtracts and Flow (may nor may
not affect other extensions with TextExtracts):
https://phabricator.wikimedia.org/T107170
Thanks,
Matt Flaschen