Ruby 3.0 End of Life
Support dates, vulnerabilities published since end of life, and upgrade guidance — rebuilt from live data.
Ruby 3.0 reached end of life on 23 Apr 2024. It no longer receives security fixes.
Support timeline
Official dates from the Ruby release process.
| Milestone | Date | Status |
|---|---|---|
| Initial release | 25 Dec 2020 | — |
| End of life | 23 Apr 2024 | 2.3 years ago |
| Latest release | 3.0.7 · 23 Apr 2024 | final |
The cost of staying: CVEs since end of life
3 Ruby vulnerabilities have been published since 23 Apr 2024. All were fixed in supported branches — 3.0 received none of them. Source: NVD.
Ruby CVEs published since 3.0's EOL, by year
0 of the 3 are rated critical · data refreshed 2026-08-09
Published 22 May 2026 · rated high — fixed in supported branches only, never in 3.0. Details
Published 28 Oct 2024 · rated high — fixed in supported branches only, never in 3.0. Details
Published 4 Mar 2025 · rated medium — fixed in supported branches only, never in 3.0. Details
Where to go from 3.0
Recommended target: Ruby 4.0 (supported until 31 Mar 2029).
The newest actively supported branch is Ruby 4.0 (latest release 4.0.6). Review ruby-lang.org before upgrading.
Frequently asked questions
Is Ruby 3.0 still safe to use?
No. Ruby 3.0 stopped receiving security fixes on 23 Apr 2024. Since then, 3 Ruby vulnerabilities have been published and fixed in supported branches — Ruby 3.0 received none of those fixes.
Can I still download Ruby 3.0?
Yes — the final release (3.0.7) generally remains available from vendor archives and OS package mirrors, but installing it means running software with known, unpatched vulnerabilities.
What should I upgrade Ruby 3.0 to?
Upgrade to Ruby 4.0, the newest actively supported branch (supported until 31 Mar 2029).