Two security patches are being merged (Jenkins is processing now for the Flow one, TextExtracts already merged) for TextExtracts and Flow:
https://gerrit.wikimedia.org/r/#/c/229030/ https://gerrit.wikimedia.org/r/#/c/229031/
It is recommended to upgrade to these if possible. There is a possible vulnerability if you are running both TextExtracts and Flow (may nor may not affect other extensions with TextExtracts):
Thanks,
Matt Flaschen