CVE-2026-93432: Quarkus Qute XSS/JSON injection via eval sub-templates. CVSS 6.1, no patch yet. Audit your templates and watch for updates. https://www.valtersit.com/cve/CVE-2026-93432/ #CVE #infosec #Quarkus
@hugovalters.bsky.social
@hugovalters.bsky.socialCVE-2026-93432: Quarkus Qute XSS/JSON injection via eval sub-templates. CVSS 6.1, no patch yet. Audit your templates and watch for updates. https://www.valtersit.com/cve/CVE-2026-93432/ #CVE #infosec #Quarkus
@fblan.bsky.socialCoucou! Le 8/10 rdv pour une nouvelle soirée MarsJUG ! Au programme : Quarkus Data, la nouvelle façon d'utiliser Hibernate dans Quarkus, présentée par Stéphane Épardaud (Red Hat). Si vous êtes dans le coin, venez échanger avec nous 😊
@quarkus.ioJoin us next Monday, September 28th, at 9am EST for Quarkus Insights Ep. 261 as Martin Kouba discusses Quarkus Signals, an extension that provides a unified, type-safe, asynchronous event bus for in-process messaging.
@myfear.comI wanted the Goblin warning in the console before I trusted a resilience annotation.
This walkthrough injects latency and 503s on one Quarkus REST boundary, then proves the caller timeout, retry, and fallback.
@qiita-trending.bot.chrs.to
@kevindubois.comWho will give our #Quarkus #LangChain4j Workshop its 100th star? 🌟 🤩
@quarkus.io⏰ Starting soon! Join us for Quarkus Insights Ep. #260 for "Quarkus and CLI Applications" with Ståle Pedersen & Max Andersen.
@adambien.blog"Static as a Roq"-an airhacksFM podcast conversation with Andy Damevin is ready to listen 👉 adambien.blog/roller/stati...
#java #podcast #quarkus #airhacks
@calmnewzvibez.bsky.socialOrchestrating Agentic AI with Quarkus Flow 1.0: A New Era for Java Workflows
Explore Quarkus Flow 1.0, a stable workflow engine for Java. Learn how it combines the Open Workflow Specification with LangChain4j for agentic AI orchestration
@kitomann.bsky.socialWe're using #Quarkus #Roq (iamroq.dev ), a wonderful static site generator. I love the type-safetey. Here's what #Claude just told me about Qute, the templating engine:
"That's a nice property of this setup — a bad template expression can't reach production. "
@jcon.oneOne massive #tech conference. One place for the #Java #community
At #JCONUSA26 Thiago Gonzaga will talk about 'Building Observable #Java Apps that Scale with #Quarkus' as a Breakout Session!
Observability is not a #luxury anymore — it’s a …
Join the #IBM #TechXchange in Atlanta: 2026.usa.jcon.one
@quarkus.ioJoin us next Monday, September 21st, at 9am EST for Quarkus Insights Ep. 260 as Ståle Pedersen & Max Andersen as they talk differences and benefits of various CLI applications including Aesh, Picocli. We'll even discuss some TamboUI too!
@alpesjug.bsky.socialiamroq.dev/posts/pwned-... #roq #quarkus-roq
@quarkus.io⏰ Starting soon! Join us for Quarkus Insights Ep. #259: Reshapr & Quarkus with Laurent Broudoux.
@myfear.comCarrier webhooks are a mapper problem until you ask where agents should touch production code.
Quarkus keeps auth and idempotency. QuickJS4j runs an approved normalizer behind a string boundary.
@myfear.comI use JSON when I need to inspect a response. A Java-to-Java call has a different contract.
This Quarkus Fory walkthrough keeps both paths clear and tests `application/fory` with real bytes.
@myfear.comI expected a Quarkus startup banner to be decoration. It became a build-time lesson: FIGlet renders during augmentation; runtime picks colored or plain output. I tested the boundary with NO_COLOR and a bad font.
