The English version of quarkus.io is the official project site. Translated sites are community supported on a best-effort basis.

Emergency releases to fix CVE-2026-39852 in all supported streams

Today, we published releases to fix a severe security vulnerability: CVE-2026-39852 in all supported streams. The patched versions are:

  • 3.20.6.1

  • 3.27.3.1

  • 3.33.1.1

  • 3.34.7

  • 3.35.2

Actualización

Please make sure you update to one of these releases immediately. To update, we recommend updating to the latest version of the Quarkus CLI and run:

quarkus update