Apache Apisix 2.x — End of Life

EOL
EOL: Mar 3, 20236 releases in this series0 CVEs

Apache Apisix 2.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatus
2.15LTSJul 22, 2022Mar 3, 20232.15.3EOL
2.14May 23, 2022Jul 22, 20222.14.1EOL
2.13LTSMar 21, 2022Aug 19, 20222.13.3EOL
2.12Jan 20, 2022Mar 21, 20222.12.1EOL
2.11Nov 23, 2021Jan 20, 20222.11.0EOL
2.10LTSSep 24, 2021Apr 1, 20222.10.5EOL

CVEs affecting Apache Apisix 2.x (0)

No CVEs tracked for Apache Apisix 2.x.

Apache Apisix 2.x is EOL — migrate to Apache Apisix 3.x

Apache Apisix 3.x is the next major release. Plan your upgrade before Apache Apisix 2.x stops receiving security patches.

See Apache Apisix 3.x

Frequently asked questions

Is Apache Apisix 2 end of life?

Yes. All Apache Apisix 2.x releases have reached end of life and no longer receive security patches. Migrate to Apache Apisix 3.x as soon as possible.

What CVEs affect Apache Apisix 2?

No CVEs are currently tracked for Apache Apisix 2.x in our database. This may mean no vulnerabilities have been recorded yet, or the data is still syncing.

What is the latest Apache Apisix 2 version?

The latest Apache Apisix 2.x patch release is 2.15.3, released on March 7, 2023. Always run the latest patch to benefit from all security fixes.

How to migrate from Apache Apisix 2 to Apache Apisix 3?

To migrate from Apache Apisix 2 to Apache Apisix 3: (1) review the official Apache Apisix 3 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.

Is it safe to run Apache Apisix 2 in production?

No. Apache Apisix 2 has reached end of life and security vulnerabilities are no longer patched. Upgrade to a supported version immediately.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA