Dependency-Track 4.8 End of Life
Support dates and upgrade guidance — rebuilt from live data.
Dependency-Track 4.8 reached end of life on 16 Oct 2023. It no longer receives security fixes.
Support timeline
Official dates from the Dependency-Track release process.
| Milestone | Date | Status |
|---|---|---|
| Initial release | 18 Apr 2023 | — |
| End of life | 16 Oct 2023 | 2.8 years ago |
| Latest release | 4.8.2 · 16 May 2023 | final |
Where to go from 4.8
Recommended target: Dependency-Track 5.0.
The newest actively supported branch is Dependency-Track 5.0 (latest release 5.0.4).
Frequently asked questions
Is Dependency-Track 4.8 still safe to use?
Dependency-Track 4.8 reached end of life on 16 Oct 2023, 1,028 days ago, and is no longer covered by standard support. Running it means no guaranteed security fixes.
Can I still download Dependency-Track 4.8?
Yes — the final release (4.8.2) generally remains available from vendor archives and OS package mirrors, but installing it means running software with known, unpatched vulnerabilities.
What should I upgrade Dependency-Track 4.8 to?
Upgrade to Dependency-Track 5.0, the newest actively supported branch.