Blog Emergency releases to fix CVE-2026-39852 in all supported streams

May 04, 2026 #security#release

Emergency releases to fix CVE-2026-39852 in all supported streams

By Jan Martiška

Today, we published releases to fix a severe security vulnerability: CVE-2026-39852 in all supported streams. The patched versions are:

  • 3.20.6.1

  • 3.27.3.1

  • 3.33.1.1

  • 3.34.7

  • 3.35.2

Update

Please make sure you update to one of these releases immediately. To update, we recommend updating to the latest version of the Quarkus CLI and run:

quarkus update

Quarkus is open. All dependencies of this project are available under the Apache Software License 2.0 or compatible license. CC by 3.0

This website was built with Jekyll, is hosted on GitHub Pages and is completely open source. If you want to make it better, fork the website and show us what you’ve got.

Navigation
Follow Us
Get Help
Languages
Quarkus is made of community projects
Copyright © Quarkus. All rights reserved. For details on our trademarks, please visit our Trademark Policy and Trademark List. Trademarks of third parties are owned by their respective holders and their mention here does not suggest any endorsement or association.