Apache Flink 2.x — End of Life

Active
4 releases in this series0 CVEs

Apache Flink 2.x is partially supported: only 2.3, 2.2, 2.1 still receive security fixes. The most recent release in this series is 2.3.0. No CVE is currently tracked for Apache Flink 2.x.

Apache Flink 2.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatusAlert me
2.3Jun 25, 2026—No2.3.0Active
2.2Dec 4, 2025—No2.2.1Active
2.1Jul 29, 2025—No2.1.3Active
2.0Mar 19, 2025—Jun 25, 20262.0.2EOL

CVEs affecting Apache Flink 2.x (0)

No CVEs tracked for Apache Flink 2.x.

Add a Apache Flink 2 EOL badge to your README

Show your users which Apache Flink version your project runs and whether it is still supported. The badge updates automatically. More formats and options →

Apache Flink 2 EOL status
[![Apache Flink 2 EOL status](https://eolcanary.com/badge/apache-flink/2.svg)](https://eolcanary.com/explore/apache-flink/2)

Frequently asked questions

Is Apache Flink 2 end of life?

Partially. 1 of the 4 Apache Flink 2.x releases have reached end of life. Still supported: 2.3, 2.2, 2.1.

What CVEs affect Apache Flink 2?

No CVEs are currently tracked for Apache Flink 2.x in the NVD data we monitor.

What is the latest Apache Flink 2 version?

The latest Apache Flink 2.x patch release is 2.3.0, released on June 23, 2026. Always run the latest patch to benefit from all security fixes.

When was Apache Flink 2 first released?

Apache Flink 2.0 was released on March 19, 2025. See the full version timeline in the table above.

Is it safe to run Apache Flink 2 in production?

Only on a supported release (2.3, 2.2, 2.1). Make sure you run the latest patch (2.3.0) to have all security fixes applied.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA