MySQL 8.0, end of life since 30 April 2026
MySQL 8.0.46 vulnerabilities
MySQL 8.0.46 is the last release of the 8.0 branch, end of life since 30 April 2026. The US National Vulnerability Database lists 1 vulnerability for this version, none of them critical. Oracle fixes flaws only in supported MySQL versions and no longer says whether new ones affect older ones.
- 1known vulnerabilities
- 0critical
- 0high
- 0exploited in the wild
What you can do
Keep MySQL 8.0.46, patched
We backport the security fixes to the MySQL version you run on your own servers, built and tested before delivery. A fix for a new vulnerability arrives within 48 hours of your order, or within 24 hours with priority delivery.
Upgrade
Move to MySQL 8.4 LTS once your applications and data can make the jump. Our fixes keep you safe while you plan it.
Assess first
Our assessment shows which vulnerabilities are real on your servers, what else is past end of life, and the remediation plan.
All 1 known vulnerability in MySQL 8.0.46
US National Vulnerability Database, 28 October 2026, highest score first. Fixed in: the first upstream release with the fix, where NVD records it. Exploited: listed in the CISA catalogue of known exploited vulnerabilities. Distribution builds may already include fixes for some of them.
| CVE | Score | Severity | Published | Fixed in | Description |
|---|---|---|---|---|---|
| CVE-2024-21176 | 5.3 | Medium | 2024-07-16 | n/a | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.4.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H). |