end-of-life.org

The riskiest EOL versions still in the wild

Versions that went end of life within the last 5 years, ranked by CVEs missed — vulnerabilities published after that version's EOL and fixed only in newer branches. Older branches are excluded: they have missed more, but almost nobody still runs them. Ranked across the 13 products with CVE analysis.

VersionEOL sinceEOL forCVEs missed
Go 1.15 2021-08-16 5.0 y 122
Go 1.16 2022-03-15 4.4 y 111
Go 1.17 2022-08-02 4.0 y 106
MySQL 8.2 2023-12-14 2.7 y 103
MySQL 8.1 2023-10-25 2.8 y 103
MySQL 5.7 2023-10-31 2.8 y 103
MySQL 8.3 2024-04-10 2.3 y 91
Go 1.18 2023-02-01 3.5 y 85

Browse

13 products carry the post-EOL CVE layer. The full directory covers all 462.