Security support for end-of-life MongoDB
MongoDB 6.0 reached end of life on 31 July 2025, MongoDB 5.0 on 31 October 2024 and 4.4 on 29 February 2024. These are their last releases, with every vulnerability the US National Vulnerability Database lists for them.
Request a server assessmentMongoDB versions past end of life
| MongoDB | Release | End of life | Known CVEs | Critical | Exploited | Forkward |
|---|---|---|---|---|---|---|
| 4.4.31 | Last MongoDB 4.4 release | 29 February 2024 | 1 | 0 | 0 | Patch on order, 48 h |
| 5.0.34 | Last MongoDB 5.0 release | 31 October 2024 | 1 | 0 | 0 | Patch on order, 48 h |
| 6.0.29 | Last MongoDB 6.0 release | 31 July 2025 | 2 | 0 | 0 | Patch on order, 48 h |
Vulnerabilities from the US National Vulnerability Database, 28 October 2026, for the upstream version, counting only entries where MongoDB itself is the vulnerable product. Exploited: listed in the CISA catalogue of known exploited vulnerabilities. Your assessment shows which of them are real on your systems.
Managed databases
On Amazon RDS or Azure, the provider controls the engine and charges for extended support. We patch the databases you run on your own servers and virtual machines. All databases
Patch on order, 48 h
We backport the fix to the version you run within 48 hours of your order, or within 24 hours with priority delivery. See the plans