Today, we released Quarkus 3.27.5, our next maintenance release for the 3.27 LTS stream.This release contains bugfixes, documentation updates, and security fixes.It should be a safe upgrade for anyone already using 3.27.Security fixesThis release fixes the following CVEs:Quarkus and direct dependenciesCVE-2026-15075 - Eclipse Vert.x: DefaultRedirectHandler cross-origin header propagationCVE-2026-15076 - Eclipse Vert.x: WebClientSession cross-domain cookie injectionCVE-2026-53712 - OnGres SCRAM client: Authentication downgradeCVE-2026-59888 - Jackson-databind: @JsonIgnore bypass with PropertyNamingStrategy on Java RecordsCVE-2026-59889 - Jackson-databind: @JsonView bypass for @JsonUnwrapped properties during deserializationCVE-2026-8484 - Jansi: Heap-based buffer overflow in JNI ioctl() wrapperCVE-2026-55405 - LangChain4j: SQL injection in embedding store metadata filterNettyThis release upgrades Netty to 4.1.136.Final, which fixes numerous security vulnerabilities including:CVE-2026-55833 - Zip bomb vulnerability in netty-codec-httpCVE-2026-59921 - Improper CR/LF neutralization in netty-codec-http (multipart)CVE-2026-59919 - Improper CR/LF neutralization in netty-codec-haproxyCVE-2026-55851 - Memory exhaustion in netty-codec-haproxyCVE-2026-56745 - Memory exhaustion in netty-codec-httpCVE-2026-59899 - Memory exhaustion in netty-codec-httpCVE-2026-55831 - Resource exhaustion/DoS in netty-codec-httpCVE-2026-56819 - Memory leak in netty-codec-http2CVE-2026-59900 - Improper header neutralization in netty-codec-http2CVE-2026-59898 - Protocol version confusion in netty-codec-http (websocket)CVE-2026-56746 - Improper access control in netty-codec-http (CORS)For the full list, see the Netty 4.1.136.Final release announcement.UpdateTo update to Quarkus 3.27, we recommend updating to the latest version of the Quarkus CLI and run:quarkus update --stream=3.27Note that quarkus update can update your applications from any version of Quarkus (including 2.x) to Quarkus 3.27.Full changelogYou can get the full changelog of 3.27.5 on GitHub.Come Join UsWe value your feedback a lot so please report bugs, ask for improvements…​ Let’s build something great together!If you are a Quarkus user or just curious, don’t be shy and join our welcoming community:provide feedback on GitHub;craft some code and push a PR;discuss with us on Zulip and on the mailing list;ask your questions on Stack Overflow.