Apache Flink 1.x — End of Life
ActiveApache Flink 1.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status |
|---|---|---|---|---|---|
| 1.20LTS | Aug 1, 2024 | — | No | 1.20.4 | Active |
| 1.19 | Mar 15, 2024 | — | No | 1.19.3 | Active |
| 1.18 | Oct 24, 2023 | — | Mar 24, 2025 | 1.18.1 | EOL |
| 1.17 | Mar 23, 2023 | — | Aug 1, 2024 | 1.17.2 | EOL |
CVEs affecting Apache Flink 1.x (0)
Apache Flink 1.x will reach end of life — migrate to Apache Flink 2.x
Apache Flink 2.x is the next major release. Plan your upgrade before Apache Flink 1.x stops receiving security patches.
Frequently asked questions
Is Apache Flink 1 end of life?
Partially. Some Apache Flink 1.x releases have reached EOL. Check the version table above for the exact status of each sub-release.
What CVEs affect Apache Flink 1?
No CVEs are currently tracked for Apache Flink 1.x in our database. This may mean no vulnerabilities have been recorded yet, or the data is still syncing.
What is the latest Apache Flink 1 version?
The latest Apache Flink 1.x patch release is 1.20.4, released on May 4, 2026. Always run the latest patch to benefit from all security fixes.
How to migrate from Apache Flink 1 to Apache Flink 2?
To migrate from Apache Flink 1 to Apache Flink 2: (1) review the official Apache Flink 2 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run Apache Flink 1 in production?
Apache Flink 1 is still supported and safe for production use. Ensure you are running the latest patch version (1.20.4) to have all security fixes applied.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA