end-of-life.org

The riskiest EOL versions still in the wild

Versions that went end of life within the last 5 years, ranked by CVEs missed — vulnerabilities published after that version's EOL and fixed only in newer branches. Older branches are excluded: they have missed more, but almost nobody still runs them. Ranked across the 13 products with CVE analysis.

VersionEOL sinceEOL forCVEs missed
MySQL 5.7 2023-10 2.9 y 127
Go 1.15 2021-08-16 5.0 y 122
Go 1.16 2022-03-15 4.4 y 111
Go 1.17 2022-08-02 4.0 y 106
MySQL 8.1 2023-10-25 2.8 y 103
MySQL 8.2 2024-01-16 2.6 y 91
Go 1.18 2023-02-01 3.5 y 85
MySQL 8.3 2024-04-30 2.3 y 78

This product uses data from the NVD API but is not endorsed or certified by the NVD.

Browse

13 products carry the post-EOL CVE layer. The full directory covers all 462.