I’ve just released Commons 1.3.9.1. Version 1.3.9.1 is a security release, which fixes a potential security issue recently reported to the BuddyPress team. The security weakness is not known to have been exploited on the Commons or on any other BuddyPress installation.
For details on the release, visit the 1.3.9.1 milestone.