The latest articles on DEV Community by endoflife-ai (@endoflifeai). https://dev.to/endoflifeai https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3921242%2Fdb4eb42d-6f16-4495-a004-a2711eea3ad9.png https://dev.to/endoflifeai en endoflife-ai Wed, 09 Sep 2026 02:41:28 +0000 https://dev.to/endoflifeai/adobe-patched-magento-versions-it-stopped-supporting-open-source-stores-below-246-got-nothing-5fcp https://dev.to/endoflifeai/adobe-patched-magento-versions-it-stopped-supporting-open-source-stores-below-246-got-nothing-5fcp <p>CVE-2026-75650, a CVSS 10.0 unauthenticated remote code execution flaw in Adobe Commerce and Magento Open Source, was exploited from September 4 and…</p> <h2> One flaw, two editions, two answers </h2> <div class="table-wrapper-paragraph"><table> <thead> <tr> <th>Version</th> <th>Adobe Commerce</th> <th>Magento Open Source</th> <th>End of standard support (Adobe)</th> <th>End of extended support (Adobe)</th> <th>EOL Risk Score</th> </tr> </thead> <tbody> <tr> <td>2.4.9</td> <td>Affected, hotfix</td> <td>Affected, hotfix</td> <td>May 31, 2029</td> <td>TBD</td> <td>30</td> </tr> <tr> <td>2.4.8</td> <td>Affected, hotfix</td> <td>Affected, hotfix</td> <td>May 31, 2028</td> <td>TBD</td> <td>30</td> </tr> <tr> <td>2.4.7</td> <td>Affected, hotfix</td> <td>Affected, hotfix</td> <td>May 31, 2027</td> <td>May 31, 2028</td> <td>30</td> </tr> <tr> <td><strong>2.4.6</strong></td> <td>Affected, hotfix</td> <td>Affected, hotfix</td> <td><strong>August 11, 2026</strong></td> <td>August 31, 2027</td> <td>55</td> </tr> <tr> <td><strong>2.4.5</strong></td> <td>Affected, hotfix (security-only period)</td> <td><strong>Not listed</strong></td> <td>August 2025</td> <td><strong>August 11, 2026</strong></td> <td>65</td> </tr> <tr> <td><strong>2.4.4</strong></td> <td>Affected, hotfix (security-only period)</td> <td><strong>Not listed</strong></td> <td>April 2025</td> <td><strong>April 14, 2026</strong></td> <td>65</td> </tr> </tbody> </table></div> <h2> What's covered </h2> <ul> <li>One flaw, two editions, two answers</li> <li>Why Adobe patched two versions it had stopped supporting</li> <li>What CISA's listing means</li> <li>What to do this week</li> </ul> <p>Full guide with every version, risk scores, and live updates: <a href="https://endoflife.ai/article-magento-cve-2026-75650-support-window" rel="noopener noreferrer">https://endoflife.ai/article-magento-cve-2026-75650-support-window</a></p> eol ecommerce security endoflife-ai Mon, 07 Sep 2026 19:00:53 +0000 https://dev.to/endoflifeai/fin-de-support-rhel-8-et-rhel-9-dates-2026-3324 https://dev.to/endoflifeai/fin-de-support-rhel-8-et-rhel-9-dates-2026-3324 <p>RHEL 8 : fin de support le 31 mai 2029. RHEL 9 : fin de support le 31 mai 2032. RHEL 10 : fin de support le 31 mai 2035.</p> <h2> Dates de fin de support de toutes les versions RHEL </h2> <div class="table-wrapper-paragraph"><table> <thead> <tr> <th>Version</th> <th>GA (disponibilité générale)</th> <th>Fin du support complet</th> <th>Fin du support de maintenance (EOL)</th> <th>Fin de l'ELS (Extended Life Cycle Support)</th> </tr> </thead> <tbody> <tr> <td><strong>RHEL 10</strong></td> <td>2025-05-20</td> <td>2030-05-31</td> <td><strong>2035-05-31</strong></td> <td>2039-05-31</td> </tr> <tr> <td><strong>RHEL 9</strong></td> <td>2022-05-18</td> <td>2027-05-31</td> <td><strong>2032-05-31</strong></td> <td>2036-05-31</td> </tr> <tr> <td><strong>RHEL 8</strong></td> <td>2019-05-07</td> <td>2024-05-31</td> <td><strong>2029-05-31</strong></td> <td>2033-05-31</td> </tr> <tr> <td><strong>RHEL 7</strong></td> <td>2014-06-10</td> <td>2019-08-06</td> <td> <strong>2024-06-30</strong> (terminé)</td> <td>2029-05-31</td> </tr> </tbody> </table></div> <h2> What's covered </h2> <ul> <li>Le cycle de vie RHEL: trois phases</li> <li>Dates de fin de support de toutes les versions RHEL</li> <li>Le piège des versions mineures: « RHEL 8 est supporté jusqu'en 2029 »</li> <li>Planifier la migration: deux cibles depuis RHEL 8</li> <li>Questions fréquentes</li> </ul> <p>Full guide with every version, risk scores, and live updates: <a href="https://endoflife.ai/article-rhel-lifecycle-fr" rel="noopener noreferrer">https://endoflife.ai/article-rhel-lifecycle-fr</a></p> eol linux redhat endoflife-ai Mon, 07 Sep 2026 19:00:51 +0000 https://dev.to/endoflifeai/aws-app-mesh-shuts-down-september-30-2026-what-happens-and-where-to-move-5c9k https://dev.to/endoflifeai/aws-app-mesh-shuts-down-september-30-2026-what-happens-and-where-to-move-5c9k <p>AWS does not merely end support for App Mesh on September 30, 2026: the console and every mesh resource become inaccessible.</p> <h2> The timeline AWS has published </h2> <div class="table-wrapper-paragraph"><table> <thead> <tr> <th>Date</th> <th>What AWS said</th> <th>Source</th> </tr> </thead> <tbody> <tr> <td>March 27, 2019</td> <td>App Mesh generally available and supported for production use</td> <td>AWS What's New</td> </tr> <tr> <td>September 2024</td> <td>End-of-support announced; new customers can no longer onboard from the announcement day; existing customers continue, with critical security and availability updates</td> <td>AWS Containers blog</td> </tr> <tr> <td>September 30, 2026</td> <td>Support discontinued; console and App Mesh resources no longer accessible</td> <td>App Mesh user guide</td> </tr> </tbody> </table></div> <h2> What's covered </h2> <ul> <li>Key Dates at a Glance</li> <li>What actually changes on the date</li> <li>The timeline AWS has published</li> <li>Where AWS says to move</li> <li>What to do this month</li> </ul> <p>Full guide with every version, risk scores, and live updates: <a href="https://endoflife.ai/article-aws-app-mesh-shutdown" rel="noopener noreferrer">https://endoflife.ai/article-aws-app-mesh-shutdown</a></p> eol aws endoflife-ai Sun, 06 Sep 2026 17:30:53 +0000 https://dev.to/endoflifeai/november-10-2026-four-support-clocks-run-out-on-one-patch-tuesday-4c14 https://dev.to/endoflifeai/november-10-2026-four-support-clocks-run-out-on-one-patch-tuesday-4c14 <p>On November 10, 2026, .NET 8 (LTS) and .NET 9 both reach end of life, PowerShell 7.4 (LTS) and 7.5 end the same day, and Windows 11 23H2 Enterprise and…</p> <h2> What's covered </h2> <ul> <li>Key Dates at a Glance</li> <li>.NET 8: the LTS that most of production is standing on</li> <li>.NET 9: the same day, on purpose</li> <li>PowerShell 7.4 and 7.5: they end when their runtime ends</li> <li>Windows 11 23H2 for Enterprise and Education: end of servicing</li> <li>The same fortnight: four more dates within days</li> <li>Nine weeks out: the triage order</li> </ul> <p>Full guide with every version, risk scores, and live updates: <a href="https://endoflife.ai/article-november-10-2026" rel="noopener noreferrer">https://endoflife.ai/article-november-10-2026</a></p> eol software endoflife-ai Sat, 05 Sep 2026 17:10:38 +0000 https://dev.to/endoflifeai/how-to-audit-an-sbom-for-end-of-life-software-four-real-sboms-21347-components-and-why-name-5gcj https://dev.to/endoflifeai/how-to-audit-an-sbom-for-end-of-life-software-four-real-sboms-21347-components-and-why-name-5gcj <p>An SBOM lists what you ship; it does not say whether any of it is still supported. How to join CycloneDX and SPDX components to lifecycle data by package…</p> <h2> What the map covers </h2> <div class="table-wrapper-paragraph"><table> <thead> <tr> <th>Ecosystem (purl type)</th> <th>Package URLs</th> <th>What it typically identifies</th> </tr> </thead> <tbody> <tr> <td><code>pkg:rpm</code></td> <td>169</td> <td>Red Hat, Fedora, SUSE, Amazon Linux packages of runtimes and servers</td> </tr> <tr> <td><code>pkg:github</code></td> <td>160</td> <td>Source repositories (rarely emitted by SBOM tools; present for completeness)</td> </tr> <tr> <td><code>pkg:docker</code></td> <td>186</td> <td>Official and vendor container images — the most valuable rows for base-image audits</td> </tr> <tr> <td><code>pkg:maven</code></td> <td>86</td> <td>Java frameworks, drivers and libraries with published lifecycles</td> </tr> <tr> <td><code>pkg:deb</code></td> <td>80</td> <td>Debian and Ubuntu packages</td> </tr> <tr> <td><code>pkg:apk</code></td> <td>55</td> <td>Alpine packages</td> </tr> <tr> <td> <code>pkg:scoop</code>, <code>pkg:chocolatey</code>, <code>pkg:winget</code> </td> <td>49, 22, 9</td> <td>Windows package managers</td> </tr> <tr> <td><code>pkg:oci</code></td> <td>45</td> <td>Registry-neutral container images</td> </tr> <tr> <td><code>pkg:npm</code></td> <td>42</td> <td>JavaScript frameworks and build tools (React, Angular, Vue, webpack, ESLint, Strapi…)</td> </tr> <tr> <td><code>pkg:generic</code></td> <td>45</td> <td>Runtimes without a registry home (Node, OpenSSL, PostgreSQL…)</td> </tr> <tr> <td><code>pkg:golang</code></td> <td>20</td> <td>Go modules with published support lines</td> </tr> <tr> <td><code>pkg:nuget</code></td> <td>18</td> <td>.NET packages</td> </tr> <tr> <td><code>pkg:composer</code></td> <td>17</td> <td>PHP frameworks (Laravel, Symfony, Drupal…)</td> </tr> <tr> <td><code>pkg:brew</code></td> <td>16</td> <td>Homebrew formulae</td> </tr> <tr> <td><code>pkg:pypi</code></td> <td>7</td> <td>Python frameworks and libraries with published lifecycles (Django, NumPy…)</td> </tr> </tbody> </table></div> <h2> What's covered </h2> <ul> <li>Why the join key has to be the purl</li> <li>What the map covers</li> <li>Four real SBOMs, one afternoon</li> <li>Three ways to run the audit</li> <li>Reading the results</li> <li>Making it a gate</li> </ul> <p>Full guide with every version, risk scores, and live updates: <a href="https://endoflife.ai/article-sbom-eol-audit" rel="noopener noreferrer">https://endoflife.ai/article-sbom-eol-audit</a></p> eol software endoflife-ai Sat, 05 Sep 2026 17:10:37 +0000 https://dev.to/endoflifeai/firefox-esr-end-of-life-support-options-what-to-do-when-esr-patches-stop-140-esr-ends-september-3llm https://dev.to/endoflifeai/firefox-esr-end-of-life-support-options-what-to-do-when-esr-patches-stop-140-esr-ends-september-3llm <p>Firefox 140 ESR reaches end of life on September 29, 2026; Firefox 153 ESR (released July 21, 2026) is the replacement, and 115 ESR stays patched for…</p> <h2> Every Firefox ESR line: release and end-of-life dates </h2> <div class="table-wrapper-paragraph"><table> <thead> <tr> <th>ESR line</th> <th>Released</th> <th>End of Life</th> <th>Status</th> <th>EOL Risk Score™</th> </tr> </thead> <tbody> <tr> <td>Firefox 153 ESR</td> <td>Jul 21, 2026</td> <td>Current ESR — no end date announced</td> <td>Supported</td> <td>40</td> </tr> <tr> <td>Firefox 140 ESR</td> <td>Jun 24, 2025</td> <td><strong>Sep 29, 2026</strong></td> <td>Approaching</td> <td>55</td> </tr> <tr> <td>Firefox 128 ESR</td> <td>Jul 9, 2024</td> <td>Sep 16, 2025</td> <td>EOL</td> <td>70</td> </tr> <tr> <td>Firefox 115 ESR</td> <td>Jul 4, 2023</td> <td><strong>Mar 31, 2027</strong></td> <td>Approaching</td> <td>40</td> </tr> <tr> <td>Firefox 102 ESR</td> <td>Jun 28, 2022</td> <td>Sep 26, 2023</td> <td>EOL</td> <td>80</td> </tr> <tr> <td>Firefox 91 ESR</td> <td>Aug 10, 2021</td> <td>Sep 20, 2022</td> <td>EOL</td> <td>80</td> </tr> <tr> <td>Firefox 78 ESR</td> <td>Jun 30, 2020</td> <td>Nov 2, 2021</td> <td>EOL</td> <td>80</td> </tr> </tbody> </table></div> <h2> What's covered </h2> <ul> <li>Key Dates at a Glance</li> <li>Every Firefox ESR line: release and end-of-life dates</li> <li>Every Firefox ESR, one line each</li> <li>How the Firefox ESR cycle works</li> <li>The Firefox 115 ESR exception</li> <li>What to do when a Firefox ESR reaches end of life</li> <li>Support options when patches stop</li> </ul> <p>Full guide with every version, risk scores, and live updates: <a href="https://endoflife.ai/article-firefox-esr-eol" rel="noopener noreferrer">https://endoflife.ai/article-firefox-esr-eol</a></p> eol software endoflife-ai Fri, 04 Sep 2026 18:09:17 +0000 https://dev.to/endoflifeai/microsoft-starts-switching-off-exchange-web-services-on-october-1-and-the-opt-in-window-already-539a https://dev.to/endoflifeai/microsoft-starts-switching-off-exchange-web-services-on-october-1-and-the-opt-in-window-already-539a <p>Exchange Web Services in Exchange Online: phased disablement starts October 1, 2026 and EWS is fully and permanently disabled April 1, 2027, with no…</p> <h2> The dates, and where each one comes from </h2> <div class="table-wrapper-paragraph"><table> <thead> <tr> <th>Date</th> <th>What happens</th> <th>Source</th> </tr> </thead> <tbody> <tr> <td><strong>July 2018</strong></td> <td>EWS deprecation announced: no further feature updates</td> <td>Learn page timeline</td> </tr> <tr> <td><strong>September 2023</strong></td> <td>Disablement date set: “on October 1, 2026, we will start blocking EWS requests from non-Microsoft apps”</td> <td>Microsoft 365 Developer Blog</td> </tr> <tr> <td><strong>January 2024</strong></td> <td>Midnight Blizzard incident involves EWS; Microsoft says it “elevated the urgency” and widened scope to its own applications</td> <td>Learn page timeline</td> </tr> <tr> <td><strong>February 5, 2026</strong></td> <td>Phased, admin-controllable plan published; day-level dates confirmed</td> <td>Exchange Team post; MC1227454</td> </tr> <tr> <td><strong>End of August 2026</strong></td> <td>Deadline to opt out of the automatic October 1 change (Allow List + <code>EWSEnabled</code> True) — <strong>passed</strong> </td> <td>Exchange Team post</td> </tr> <tr> <td><strong>September 2026</strong></td> <td>Microsoft pre-populates an AppID Allow List for tenants that never created one, from their own usage</td> <td>Exchange Team post</td> </tr> <tr> <td><strong>October 1, 2026</strong></td> <td>Tenants still at the default (<code>EWSEnabled</code> Null) are flipped to False as the rollout reaches them; EWS blocked for every app in the tenant</td> <td>Exchange Team post; MC1227454</td> </tr> <tr> <td><strong>April 1, 2027</strong></td> <td>EWS fully and permanently disabled; the <code>EWSEnabled</code> control is removed from tenant admins</td> <td>Exchange Team post; MC1227454</td> </tr> </tbody> </table></div> <h2> What's covered </h2> <ul> <li>The dates, and where each one comes from</li> <li>How the switch actually works</li> <li>On-premises Exchange is not affected — but hybrid is</li> <li>What still does not exist in Microsoft Graph</li> <li>What to do in the four weeks left</li> </ul> <p>Full guide with every version, risk scores, and live updates: <a href="https://endoflife.ai/article-exchange-web-services-retirement-2026" rel="noopener noreferrer">https://endoflife.ai/article-exchange-web-services-retirement-2026</a></p> eol microsoft endoflife-ai Fri, 04 Sep 2026 18:08:45 +0000 https://dev.to/endoflifeai/no-netscaler-131-does-not-die-on-september-15-that-is-end-of-maintenance-and-end-of-life-is-a-3fjh https://dev.to/endoflifeai/no-netscaler-131-does-not-die-on-september-15-that-is-end-of-maintenance-and-end-of-life-is-a-3fjh <p>Coverage this week says NetScaler ADC firmware 13.1 reaches end of life on September 15, 2026.</p> <h2> The 13.1 dates, from the vendor </h2> <div class="table-wrapper-paragraph"><table> <thead> <tr> <th>Milestone</th> <th>Date</th> <th>What it means</th> </tr> </thead> <tbody> <tr> <td>13.1 general availability</td> <td>September 15, 2021</td> <td>Start of the feature phase</td> </tr> <tr> <td>Maintenance phase</td> <td>From Q3 2023</td> <td>Maintenance releases only; CTX241500 extended this from two years to three when the seven-year model was introduced</td> </tr> <tr> <td><strong>End of Maintenance (EOM)</strong></td> <td><strong>September 15, 2026</strong></td> <td>Maintenance phase ends; technical support only from here</td> </tr> <tr> <td><strong>End of Life (EOL)</strong></td> <td><strong>September 15, 2027</strong></td> <td>Line unsupported; the product matrix notes optional extended support for eligible customers, arranged with the vendor</td> </tr> </tbody> </table></div> <h2> What's covered </h2> <ul> <li>The 13.1 dates, from the vendor</li> <li>Why the extra year is not a reason to wait</li> <li>The eleven-day checklist</li> </ul> <p>Full guide with every version, risk scores, and live updates: <a href="https://endoflife.ai/article-netscaler-131-eom-not-eol-september-2026" rel="noopener noreferrer">https://endoflife.ai/article-netscaler-131-eom-not-eol-september-2026</a></p> eol software endoflife-ai Fri, 04 Sep 2026 18:08:43 +0000 https://dev.to/endoflifeai/moodle-50-reaches-end-of-life-on-october-5-and-51-leaves-general-support-the-same-day-4619 https://dev.to/endoflifeai/moodle-50-reaches-end-of-life-on-october-5-and-51-leaves-general-support-the-same-day-4619 <p>Moodle 5.0's security support ends October 5, 2026; general support ended April 20, 2026. On the same day Moodle 5.1 leaves general support and runs…</p> <h2> The dates, from Moodle's own releases page </h2> <div class="table-wrapper-paragraph"><table> <thead> <tr> <th>Version</th> <th>Released</th> <th>General support ends</th> <th>Security support ends</th> </tr> </thead> <tbody> <tr> <td>Moodle 5.2</td> <td>April 20, 2026</td> <td>April 19, 2027</td> <td>October 4, 2027</td> </tr> <tr> <td>Moodle 5.1</td> <td>October 6, 2025</td> <td><strong>October 5, 2026</strong></td> <td>April 19, 2027</td> </tr> <tr> <td><strong>Moodle 5.0</strong></td> <td>April 14, 2025</td> <td>April 20, 2026</td> <td><strong>October 5, 2026</strong></td> </tr> <tr> <td>Moodle 4.5 LTS</td> <td>October 7, 2024</td> <td>October 6, 2025</td> <td>October 4, 2027</td> </tr> <tr> <td>Moodle 4.4</td> <td>April 22, 2024</td> <td>April 21, 2025</td> <td>December 8, 2025 (past)</td> </tr> </tbody> </table></div> <h2> What's covered </h2> <ul> <li>The dates, from Moodle's own releases page</li> <li>The 4.5 LTS anomaly: older, and supported longer</li> <li>Who is actually on 5.0</li> <li>The four-week checklist</li> </ul> <p>Full guide with every version, risk scores, and live updates: <a href="https://endoflife.ai/article-moodle-50-eol-october-2026" rel="noopener noreferrer">https://endoflife.ai/article-moodle-50-eol-october-2026</a></p> eol software endoflife-ai Thu, 03 Sep 2026 07:13:49 +0000 https://dev.to/endoflifeai/endoflifeai-mcp-server-110-kev-exposure-sbom-checks-and-edge-devices-for-ai-agents-3987 https://dev.to/endoflifeai/endoflifeai-mcp-server-110-kev-exposure-sbom-checks-and-edge-devices-for-ai-agents-3987 <p>The endoflife.ai MCP server now has ten read-only tools. The original five answered "is this version end-of-life" and "how risky is it". The new five let an agent finish the job:</p> <ul> <li> <strong>get_kev_exposure</strong> returns every CISA Known Exploited Vulnerabilities entry attributed to a product, with the date added, the federal due date, and CISA's required-action text verbatim. The "discontinue use" entries are the ones that matter for end-of-life versions.</li> <li> <strong>get_upcoming_eol</strong> lists everything reaching end-of-life within N days, across the catalog or for a list of products.</li> <li> <strong>check_sbom</strong> takes a CycloneDX or SPDX JSON document, maps components to tracked products, scores them, and lists what it could not match rather than guessing.</li> <li> <strong>get_upgrade_path</strong> gives the supported releases with the longest runway, our recommended target, and the vendor-stated successor where one is published.</li> <li> <strong>get_edge_device_status</strong> queries the EOS Edge Device feed of firewalls, VPN gateways and ADCs, with statuses in the vocabulary of CISA BOD 26-02.</li> </ul> <p>Also new: tool annotations and structured output, the site's feeds exposed as resources, three ready-made prompts (audit_stack, eol_calendar, edge_device_review), a health endpoint, and "did you mean" suggestions when a product name misses.</p> <p>Install in any MCP client with <code>npx endoflife-mcp</code>, or point a remote-capable client at <a href="https://mcp.endoflife.ai" rel="noopener noreferrer">https://mcp.endoflife.ai</a>. Every answer carries the source URL to cite. Details at <a href="https://endoflife.ai/mcp" rel="noopener noreferrer">https://endoflife.ai/mcp</a>.</p> mcp ai security devops endoflife-ai Sun, 30 Aug 2026 18:26:26 +0000 https://dev.to/endoflifeai/october-13-2026-the-day-three-windows-support-clocks-run-out-3kjj https://dev.to/endoflifeai/october-13-2026-the-day-three-windows-support-clocks-run-out-3kjj <p>On one Patch Tuesday — October 13, 2026 — the final ESU year for Windows Server 2012 and 2012 R2 ends, Windows 10's first (and for consumers, only) ESU year expires, and Windows Server 2022 leaves mainstream support. What each clock means, the triage order, and the Exchange Server deadline 19 days behind it.</p> <h2> What's covered </h2> <ul> <li>Key Dates at a Glance</li> <li>Windows Server 2012 and 2012 R2: the last patch, full stop</li> <li>Windows 10: the first ESU year runs out — for consumers, the only one</li> <li>Windows Server 2022 leaves mainstream — a calendar note, not an emergency</li> <li>Nineteen days later: the Exchange deadline</li> <li>Six weeks out: the triage order</li> </ul> <p>Full guide with every version, risk scores, and live updates: <a href="https://endoflife.ai/article-october-13-2026" rel="noopener noreferrer">https://endoflife.ai/article-october-13-2026</a></p> eol software endoflife-ai Fri, 28 Aug 2026 00:15:35 +0000 https://dev.to/endoflifeai/giteas-first-kev-entry-cve-2026-60004-a-two-day-federal-deadline-and-a-release-policy-with-2ca3 https://dev.to/endoflifeai/giteas-first-kev-entry-cve-2026-60004-a-two-day-federal-deadline-and-a-release-policy-with-2ca3 <p>CISA added CVE-2026-60004 — a CVSS 9.8 code-injection flaw in Gitea's diffpatch endpoint — to the KEV catalog on August 25 with an August 28 deadline. Gitea's own advisory puts the affected range at 1.17 through 1.27.0: four years of releases. And because Gitea has no LTS and no backports, the only supported destination is 1.27.1 or later.</p> <h2> The Gitea Support Map </h2> <div class="table-wrapper-paragraph"><table> <thead> <tr> <th>Release line</th> <th>First release</th> <th>Supported until</th> <th>In CVE-2026-60004 range?</th> <th>Status</th> </tr> </thead> <tbody> <tr> <td><strong>Gitea 1.27</strong></td> <td>July 13, 2026</td> <td>Current line</td> <td>Below 1.27.1 only — fixed from 1.27.1</td> <td>Supported</td> </tr> <tr> <td><strong>Gitea 1.26</strong></td> <td>April 18, 2026</td> <td>July 13, 2026</td> <td>Yes — no patch coming to this line</td> <td>EOL</td> </tr> <tr> <td><strong>Gitea 1.25</strong></td> <td>October 29, 2025</td> <td>April 18, 2026</td> <td>Yes — no patch coming to this line</td> <td>EOL</td> </tr> <tr> <td><strong>Gitea 1.24</strong></td> <td>June 10, 2025</td> <td>October 29, 2025</td> <td>Yes — no patch coming to this line</td> <td>EOL</td> </tr> <tr> <td><strong>Gitea 1.23</strong></td> <td>January 9, 2025</td> <td>June 10, 2025</td> <td>Yes — no patch coming to this line</td> <td>EOL</td> </tr> <tr> <td><strong>Gitea 1.22</strong></td> <td>May 27, 2024</td> <td>January 9, 2025</td> <td>Yes — no patch coming to this line</td> <td>EOL</td> </tr> <tr> <td><strong>Gitea 1.17 – 1.21</strong></td> <td>July 30, 2022 onward</td> <td>Each line ended at its successor's release</td> <td>Yes — no patch coming to these lines</td> <td>EOL</td> </tr> </tbody> </table></div> <h2> What's covered </h2> <ul> <li>Key Dates at a Glance</li> <li>What Gitea's Advisory Actually Says</li> <li>The Gitea Support Map</li> <li>No LTS Means the Ladder Has One Rung</li> <li>What To Do, In Order</li> <li>Related Reading</li> </ul> <p>Full guide with every version, risk scores, and live updates: <a href="https://endoflife.ai/article-gitea-cve-2026-60004" rel="noopener noreferrer">https://endoflife.ai/article-gitea-cve-2026-60004</a></p> eol security