Quarkus 3.33.4.1 released - LTS emergency release

Today, we released Quarkus 3.33.4.1, an emergency release for the 3.33 LTS stream.

This release fixes the following CVEs:

  • CVE-2026-93879

  • CVE-2026-94451

  • CVE-2026-87744

  • Everything resolved by Jackson 2.21.7

  • Everything resolved by snappy-java 1.1.10.11

  • Everything resolved by lz4-java 1.11.4

  • Everything resolved by Netty 4.1.139.Final (note that, at the time of publishing this announcement, the corresponding CVEs have not been published yet)

  • Everything resolved by Vert.x 4.5.35

It should be a safe upgrade for anyone already using 3.33.

Update

To update to Quarkus 3.33, we recommend updating to the latest version of the Quarkus CLI and run:

quarkus update --stream=3.33

Note that quarkus update can update your applications from any version of Quarkus (including 2.x) to Quarkus 3.33.

Full changelog

Come Join Us

We value your feedback a lot so please report bugs, ask for improvements…​ Let’s build something great together!

If you are a Quarkus user or just curious, don’t be shy and join our welcoming community: