WordPress released an update today that addresses some security vulnerabilities. Updated versions of WordPress 4.9 and older releases are also available, for users who have not yet updated to 5.0.
https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/
This update should happen automatically if you have not disabled automatic updates.