Security support for end-of-life PostgreSQL
PostgreSQL 14 reaches end of life on 12 November 2026, a year after PostgreSQL 13. After that date the PostgreSQL project publishes no more fixes for it. These are the versions still in use, with every vulnerability the US National Vulnerability Database lists for them.
Request a server assessmentPostgreSQL versions past end of life
| PostgreSQL | Ships with | End of life | Known CVEs | Critical | Exploited | Forkward |
|---|---|---|---|---|---|---|
| 9.2.24 | CentOS 7, RHEL 7, Oracle Linux 7 and Amazon Linux 2 | 9 November 2017 | 18 | 2 | 0 | Patch on order, 48 h |
| 9.6.24 | Last PostgreSQL 9.6 release | 11 November 2021 | 10 | 0 | 0 | Patch on order, 48 h |
| 10.23 | Last PostgreSQL 10 release | 10 November 2022 | 10 | 0 | 0 | Patch on order, 48 h |
| 11.22 | Last PostgreSQL 11 release | 9 November 2023 | 8 | 0 | 0 | Patch on order, 48 h |
| 12.22 | Last PostgreSQL 12 release | 21 November 2024 | 8 | 0 | 0 | Patch on order, 48 h |
| 13.23 | Last PostgreSQL 13 release | 13 November 2025 | 8 | 0 | 0 | Patch on order, 48 h |
| 14.24 | Last PostgreSQL 14 release | 12 November 2026 | 0 | 0 | 0 | Patch on order, 48 h |
Vulnerabilities from the US National Vulnerability Database, 28 October 2026, for the upstream version, counting only entries where PostgreSQL itself is the vulnerable product. Exploited: listed in the CISA catalogue of known exploited vulnerabilities. Package versions from each distribution's public repositories. Distribution builds include some vendor fixes; your assessment shows which risks are real.
Managed databases
On Amazon RDS or Azure, the provider controls the engine and charges for extended support. We patch the databases you run on your own servers and virtual machines. All databases
Patch on order, 48 h
We backport the fix to the version you run within 48 hours of your order, or within 24 hours with priority delivery. See the plans