Joomla 3.9.2 is now available for update, everyone should update immediately, this is a security release which addresses 3 security vulnerabilities (directory traversal in com_media component, helpsites refresh endpoint callable for non authenticated users and Object.prototype pollution in JQuery $.extend), also this release contains more than 20 bug fixes.
Joomla 3.9.3 is now available for update. This is a security release which addresses 6 security vulnerabilities also contains +30 bug fixes, and includes various security related improvements, everyone should update quickly.