The PHP Group announced multiple vulnerabilities that have been fixed in the latest release of PHP 7.4, 8.0 and 8.1.
CVE-2022-31625 and CVE-2022-31626 will affect ASUSTOR products with PHP 7.4 or PHP 8.1 installed on ADM 4.1.
Updates with PHP 7.4.30 and PHP 8.1.7 has been released on App Central for ADM 4.1.