Contao version 3.5.39 is available. The bugfix release fixes an issue regarding the user sessions not being invalidated upon password changes (see CVE-2019-10641).

See also: Download | Tickets | Version comparison | Change log