We're planning a CXF 3.6.x release with that CVE fix by the end of
July. We won't be releasing any more 3.5.x releases.

Colm.

On Wed, Jul 8, 2026 at 9:11 PM Rodrigo Bourbon via users
<[email protected]> wrote:
>
> Hi, is it possible to know an estimate of when a patch
> addressing CVE-2026-49875 will be released for minors 3.6 and 3.5?

Reply via email to