# kong 3.9.2

- Product: kong (https://whatsnew.fyi/product/kong)
- Vendor: Kong
- Date: 2026-06-04
- Version: 3.9.2
- Original notes: https://github.com/Kong/kong/releases/tag/3.9.2
- Permalink: https://whatsnew.fyi/product/kong/releases/3.9.2

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **security** — Applied upstream nginx security patches for CVE-2026-40701, CVE-2026-40460, CVE-2026-42934, CVE-2026-42946, CVE-2026-42945, and CVE-2026-9256

###### Kong

###### Dependencies
###### Core

- Bumped luarocks from 3.11.1 to 3.12.2.
 [#14672](https://github.com/Kong/kong/issues/14672)

###### Fixes
###### Core

- Applied upstream nginx security patches for CVE-2026-40701, CVE-2026-40460, CVE-2026-42934, CVE-2026-42946, CVE-2026-42945, and CVE-2026-9256.
 [#14882](https://github.com/Kong/kong/issues/14882)