The scope at the moment seems to mostly affect mods on 1.7 and 1.12 but may also occur on other Minecraft versions, there is still work going on to find a full list of mods and affected versions.
This is an RCE which allows bad actors to run code remotely on your computer when connected on the same server as them. Unfortunately there is another exploit going around the modded Minecraft community at the moment.