Security announcements

MSA-19-0001: Manage groups capability is missing XSS risk flag