Quarkus 3.38.1 is a maintenance release for the 3.38 release train, delivering bugfixes and a critical security patch for CVE-2026-50559, which addresses an HTTP path-based authorization bypass via encoded semicolons, slashes, and backslashes. Upgrading is recommended for all 3.38 users via the Quarkus CLI using `quarkus update`.
1.6K Impressions