Security support for end-of-life Python
Python 3.10 reached end of life on 1 October 2026. Python 2.7, still the default on CentOS 7, stopped in 2020. These are the versions still in use, with every vulnerability the US National Vulnerability Database lists for them.
Request a server assessmentPython versions past end of life
| Python | Ships with | End of life | Known CVEs | Critical | Exploited | Forkward |
|---|---|---|---|---|---|---|
| 2.7.5 | CentOS 7, RHEL 7 and Oracle Linux 7 | 1 January 2020 | 74 | 11 | 0 | Patch on order, 48 h |
| 2.7.18 | CentOS 8, Amazon Linux 2 and Debian 11 | 1 January 2020 | 35 | 2 | 0 | Patch on order, 48 h |
| 3.6.8 | CentOS 7, RHEL 7, Oracle Linux 7 and CentOS 8 | 23 December 2021 | 58 | 8 | 0 | Patch on order, 48 h |
| 3.6.15 | Last Python 3.6 release | 23 December 2021 | 28 | 2 | 0 | Patch on order, 48 h |
| 3.7.17 | Last Python 3.7 release | 27 June 2023 | 22 | 1 | 0 | Patch on order, 48 h |
| 3.8.2 | Ubuntu 20.04 | 7 October 2024 | 50 | 8 | 0 | Patch on order, 48 h |
| 3.8.20 | Last Python 3.8 release | 7 October 2024 | 16 | 0 | 0 | Patch on order, 48 h |
| 3.9.2 | Debian 11 | 31 October 2025 | 38 | 4 | 0 | Patch on order, 48 h |
| 3.9.25 | Last Python 3.9 release | 31 October 2025 | 14 | 0 | 0 | Patch on order, 48 h |
| 3.10.22 | Last Python 3.10 release | 1 October 2026 | 10 | 0 | 0 | Patch on order, 48 h |
Vulnerabilities from the US National Vulnerability Database, 28 October 2026, for the upstream version, counting only entries where Python itself is the vulnerable product. Exploited: listed in the CISA catalogue of known exploited vulnerabilities. Package versions from each distribution's public repositories. Distribution builds include some vendor fixes; your assessment shows which risks are real.
Django
Django 4.2, 3.2 and 2.2 are past end of life too. Django end of life
Patch on order, 48 h
We backport the fix to the version you run within 48 hours of your order, or within 24 hours with priority delivery. See the plans