Quarkus ↗

Red Hat · Web / Framework

Track your version:Monitors Quarkus and tailors your dashboard to that exact version.

3.36.2 · latest cycle100/100 Healthy

Summary iPlain-English security verdict for Quarkus, generated from its current health score, actively-exploited vulnerabilities, and latest supported version.

Quarkus currently scores 100/100 — healthy. No tracked vulnerabilities are currently known to be exploited in the wild. The latest supported release is 3.36.2. It's on the latest patch with no significant known issues — keep it current.

Disclosure trend iNew CVEs published for Quarkus each year (NVD). A higher bar means more disclosures that year — more scrutiny, not necessarily less safe.

'19

'20

'21

'22

'23

'24

'25

'26

Patch priority — what to act on iThe issues to fix first — actively exploited (CISA KEV) first, then by exploitation probability (EPSS), then severity. Each row's "→ fixed in" is the earliest version that patches it; "see advisory" means no fixed version is published.

Most urgent first — actively exploited, then likeliest to be exploited.

CVE-2022-4116 CRITICAL EPSS 33% → fixed in 2.14.2 CVE-2021-26291 CRITICAL CWE-346 EPSS 9% → fixed in 1.13.5 CVE-2022-2466 CRITICAL CWE-444 EPSS 1% → fixed in 2.10.4 CVE-2024-12225 CRITICAL CWE-288 EPSS 0% → fixed in 3.15.3.1

See all 48 known Quarkus CVEs & security history →

Get alerted about Quarkus

Be emailed the moment Quarkus gets a newly exploited vulnerability (CISA KEV) or a release reaches end of life. Free · double opt-in · unsubscribe anytime.

We email only on real events for Quarkus — no marketing, no sharing, and we never know what you run. Track your whole stack →

Versions & lifecycle iWhen each release line stops receiving security patches (end-of-life). After EOL there are no more fixes — plan upgrades before these dates.

How long each Quarkus release line is supported — and when it sunsets. Select a line for its full report.

Mar25'27 Quarkus 3.33EOL 2027-03-25

Sept24'26 Quarkus 3.27EOL 2026-09-24

May27'26 Quarkus 3.35ended 2026-05-27

May1'26 Quarkus 3.34ended 2026-05-01

Mar28'26 Quarkus 3.20ended 2026-03-28

Mar25'26 Quarkus 3.32ended 2026-03-25

Feb26'26 Quarkus 3.31ended 2026-02-26

Jan28'26 Quarkus 3.30ended 2026-01-28

Nov26'25 Quarkus 3.29ended 2025-11-26

Oct29'25 Quarkus 3.28ended 2025-10-29

Sept25'25 Quarkus 3.15ended 2025-09-25

Sept24'25 Quarkus 3.26ended 2025-09-24

Full Quarkus end-of-life dates & support timeline →

3.36 latest 3.36.2 Supported 3.36.2 → 3.35 latest 3.35.4 End of life ended 2026-05-273.35.4 → 3.34 latest 3.34.7 End of life ended 2026-05-013.34.7 → 3.33 latest 3.33.2 Supported until 2027-03-253.33.2 → 3.32 latest 3.32.4 End of life ended 2026-03-253.32.4 → 3.31 latest 3.31.4 End of life ended 2026-02-263.31.4 → 3.30 latest 3.30.8 End of life ended 2026-01-283.30.8 → 3.29 latest 3.29.4 End of life ended 2025-11-263.29.4 → 3.28 latest 3.28.5 End of life ended 2025-10-293.28.5 → 3.27 latest 3.27.4 Supported until 2026-09-243.27.4 → See all upcoming end-of-life dates →

Frequently asked

Is Quarkus safe and patched?

What should I do about Quarkus now?

Upgrade Quarkus to the latest supported release (3.36.2) or later and apply available security updates, then confirm against Red Hat's official advisory.

When does Quarkus reach end-of-life?

The latest supported Quarkus release is 3.36.2. After end-of-life a release no longer receives security patches.

Which versions of Quarkus are still receiving security updates?

Supported Quarkus release lines (latest 3.36.2): 3.36, 3.33, 3.27. End-of-life releases no longer receive security patches.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Red Hat's official advisory before you patch or upgrade — Quarkus official site ↗