Today, we released Quarkus 3.40.1.1, an emergency release for the 3.40 LTS stream.This release fixes the following CVEs:CVE-2026-93879CVE-2026-94451CVE-2026-87744Everything resolved by snappy-java 1.1.10.11Everything resolved by lz4-java 1.11.4Everything resolved by Netty 4.1.139.Final (note that, at the time of publishing this announcement, the corresponding CVEs have not been published yet)Everything resolved by Vert.x 4.5.35It should be a safe upgrade for anyone already using 3.40.UpdateTo update to Quarkus 3.40, we recommend updating to the latest version of the Quarkus CLI and run:quarkus update --stream=3.40Note that quarkus update can update your applications from any version of Quarkus (including 2.x) to Quarkus 3.40.Full changelogYou can get the full changelog of 3.40.1.1 on GitHub.Come Join UsWe value your feedback a lot so please report bugs, ask for improvements…​ Let’s build something great together!If you are a Quarkus user or just curious, don’t be shy and join our welcoming community:provide feedback on GitHub;craft some code and push a PR;discuss with us on Zulip and on the mailing list;ask your questions on Stack Overflow.