Service announcements
2020-04-23 06:34: Joomla! 3.9.18 security updateJoomla! 3.9.18 was announced 21 April 2020 as a security update for all previous Joomla! editions.
Joomla! 3.9.16 and older versions are therefore considered to be insecure.
If you're using Joomla! 3.9.16 or older versions, you must upgrade to 3.9.18 as soon as possible.
PS: Joomla! 3.9.17 was first released to address these issues, but is not recommended due to bugs fixed in 3.9.18.
Source: