Apache Flink 1.x — End of Life

Active
4 releases in this series0 CVEs

Apache Flink 1.x is partially supported: only 1.20 still receives security fixes. The most recent release in this series is 1.20.5. No CVE is currently tracked for Apache Flink 1.x. The next major version is Apache Flink 2. See Apache Flink 2 →

Apache Flink 1.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatusAlert me
1.20LTSAug 1, 2024—No1.20.5Active
1.19Mar 15, 2024—Jul 1, 20261.19.3EOL
1.18Oct 24, 2023—Mar 24, 20251.18.1EOL
1.17Mar 23, 2023—Aug 1, 20241.17.2EOL

CVEs affecting Apache Flink 1.x (0)

No CVEs tracked for Apache Flink 1.x.

Apache Flink 1.x will reach end of life — migrate to Apache Flink 2.x

Apache Flink 2.x is the next major release. Plan your upgrade before Apache Flink 1.x stops receiving security patches.

See Apache Flink 2.x

Add a Apache Flink 1 EOL badge to your README

Show your users which Apache Flink version your project runs and whether it is still supported. The badge updates automatically. More formats and options →

Apache Flink 1 EOL status
[![Apache Flink 1 EOL status](https://eolcanary.com/badge/apache-flink/1.svg)](https://eolcanary.com/explore/apache-flink/1)

Frequently asked questions

Is Apache Flink 1 end of life?

Partially. 3 of the 4 Apache Flink 1.x releases have reached end of life. Still supported: 1.20.

What CVEs affect Apache Flink 1?

No CVEs are currently tracked for Apache Flink 1.x in the NVD data we monitor.

What is the latest Apache Flink 1 version?

The latest Apache Flink 1.x patch release is 1.20.5, released on June 11, 2026. Always run the latest patch to benefit from all security fixes.

How to migrate from Apache Flink 1 to Apache Flink 2?

To migrate from Apache Flink 1 to Apache Flink 2: (1) review the official Apache Flink 2 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.

Is it safe to run Apache Flink 1 in production?

Only on a supported release (1.20). Make sure you run the latest patch (1.20.5) to have all security fixes applied.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA