Merge pull request #2630 from jmartisk/cve-2026-39852

Post about CVE-2026-39852

Author: jmartisk

_posts/2026-05-04-CVE-2026-39852.adoc

@@ -0,0 +1,26 @@
+---
+layout: post
+title: Emergency releases to fix  CVE-2026-39852 in all supported streams
+date: 2026-05-04
+tags: security release
+synopsis: We released emergency patches to fix CVE-2026-39852 in all supported streams.
+author: jmartisk
+---
+
+Today, we published releases to fix a severe security vulnerability: https://github.com/quarkusio/quarkus/security/advisories/GHSA-rc95-pcm8-65v9[CVE-2026-39852] in all supported streams. The patched versions are:
+
+- 3.20.6.1
+- 3.27.3.1
+- 3.33.1.1
+- 3.34.7
+- 3.35.2
+
+== Update
+
+Please make sure you update to one of these releases immediately.
+To update, we recommend updating to the latest version of the Quarkus CLI and run:
+
+[source,bash]
+----
+quarkus update
+----