Security support for end-of-life databases
MySQL 8.0, MariaDB 10.6 and PostgreSQL 13 are past end of life, and PostgreSQL 14 follows on 12 November 2026. On a managed cloud database the provider charges for extended support. On your own servers, we backport the fixes.
Request a server assessmentWhat we keep patched
MySQL
5.5 to 8.0. Oracle ended support for 8.0 on 30 April 2026.
MariaDB
5.5 to 10.6, including the releases CentOS, Debian and Amazon Linux ship.
PostgreSQL
9.2 to 14. PostgreSQL 14 reaches end of life on 12 November 2026.
MongoDB
4.4, 5.0 and 6.0, all past end of life.
Versions and their known vulnerabilities
| Product | Version | End of life | Known CVEs | Critical | Exploited | Forkward |
|---|---|---|---|---|---|---|
| MySQL | 5.5.63 | 31 December 2018 | 210 | 2 | 0 | Patch on order, 48 h |
| MySQL | 5.6.51 | 28 February 2021 | 130 | 2 | 0 | Patch on order, 48 h |
| MySQL | 5.7.33 | 31 October 2023 | 106 | 3 | 0 | Patch on order, 48 h |
| MySQL | 5.7.42 | 31 October 2023 | 41 | 1 | 0 | Patch on order, 48 h |
| MySQL | 5.7.44 | 31 October 2023 | 36 | 1 | 0 | Patch on order, 48 h |
| MySQL | 8.0.42 | 30 April 2026 | 65 | 0 | 0 | Patch on order, 48 h |
| MySQL | 8.0.46 | 30 April 2026 | 1 | 0 | 0 | Patch on order, 48 h |
| MariaDB | 5.5.68 | 11 April 2020 | 18 | 0 | 0 | Patch on order, 48 h |
| MariaDB | 10.3.28 | 25 May 2023 | 57 | 0 | 0 | Patch on order, 48 h |
| MariaDB | 10.3.39 | 25 May 2023 | 2 | 0 | 0 | Patch on order, 48 h |
| MariaDB | 10.4.34 | 18 June 2024 | 2 | 0 | 0 | Patch on order, 48 h |
| MariaDB | 10.5.29 | 24 June 2025 | 2 | 0 | 0 | Patch on order, 48 h |
| MariaDB | 10.6.28 | 6 July 2026 | 1 | 0 | 0 | Patch on order, 48 h |
| PostgreSQL | 9.2.24 | 9 November 2017 | 18 | 2 | 0 | Patch on order, 48 h |
| PostgreSQL | 9.6.24 | 11 November 2021 | 10 | 0 | 0 | Patch on order, 48 h |
| PostgreSQL | 10.23 | 10 November 2022 | 10 | 0 | 0 | Patch on order, 48 h |
| PostgreSQL | 11.22 | 9 November 2023 | 8 | 0 | 0 | Patch on order, 48 h |
| PostgreSQL | 12.22 | 21 November 2024 | 8 | 0 | 0 | Patch on order, 48 h |
| PostgreSQL | 13.23 | 13 November 2025 | 8 | 0 | 0 | Patch on order, 48 h |
| PostgreSQL | 14.24 | 12 November 2026 | 0 | 0 | 0 | Patch on order, 48 h |
| MongoDB | 4.4.31 | 29 February 2024 | 1 | 0 | 0 | Patch on order, 48 h |
| MongoDB | 5.0.34 | 31 October 2024 | 1 | 0 | 0 | Patch on order, 48 h |
| MongoDB | 6.0.29 | 31 July 2025 | 2 | 0 | 0 | Patch on order, 48 h |
Vulnerabilities from the US National Vulnerability Database for each exact version. Exploited: listed in the CISA catalogue of known exploited vulnerabilities. End-of-life dates from each project, via endoflife.date. Your assessment shows which risks are real on your systems.
NIS2 and DORA
Both expect you to handle known vulnerabilities. Our fixes and their public status give your auditor an answer for every old system you keep. What each law asks
Patch on order, 48 h
We backport the fix to the version you run within 48 hours of your order, or within 24 hours with priority delivery. See the plans