An SQL injection vulnerability has been found recently in Administration part of Polls module by vekt0r, so we release 0.9.9 shortly as a security update for 0.9.x branch.
This update also includes significant changes in site security system and fixes for all recently discovered bugs.
Head to release notes page for more information.