Two security patches are being merged (Jenkins is processing now) for TextExtracts and Flow:

https://gerrit.wikimedia.org/r/#/c/229039/ https://gerrit.wikimedia.org/r/#/c/229040/

It is recommended to upgrade to these if possible. There is a vulnerability if you are running both TextExtracts and Flow (may nor may not affect other extensions with TextExtracts):

https://phabricator.wikimedia.org/T107170

Thanks,

Matt Flaschen