Apache Maven 3.x — End of Life
ActiveApache Maven 3.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status |
|---|---|---|---|---|---|
| 3.9 | Jan 31, 2023 | — | No | 3.9.16 | Active |
| 3.8 | Mar 30, 2021 | — | Jun 14, 2025 | 3.8.9 | EOL |
| 3.6 | Oct 24, 2018 | — | Mar 30, 2021 | 3.6.3 | EOL |
| 3.5 | Apr 3, 2017 | — | Oct 24, 2018 | 3.5.4 | EOL |
| 3.3 | Mar 13, 2015 | — | Apr 3, 2017 | 3.3.9 | EOL |
| 3.2 | Feb 14, 2014 | — | Mar 13, 2015 | 3.2.5 | EOL |
| 3.1 | Jun 28, 2013 | — | Feb 14, 2014 | 3.1.1 | EOL |
| 3.0 | Oct 4, 2010 | — | Jun 28, 2013 | 3.0.5 | EOL |
CVEs affecting Apache Maven 3.x (0)
Frequently asked questions
Is Apache Maven 3 end of life?
Partially. Some Apache Maven 3.x releases have reached EOL. Check the version table above for the exact status of each sub-release.
What CVEs affect Apache Maven 3?
No CVEs are currently tracked for Apache Maven 3.x in our database. This may mean no vulnerabilities have been recorded yet, or the data is still syncing.
What is the latest Apache Maven 3 version?
The latest Apache Maven 3.x patch release is 3.9.16, released on May 17, 2026. Always run the latest patch to benefit from all security fixes.
When was Apache Maven 3 first released?
Apache Maven 3.0 was initially released on January 31, 2023. See the full version timeline in the table above.
Is it safe to run Apache Maven 3 in production?
Apache Maven 3 is still supported and safe for production use. Ensure you are running the latest patch version (3.9.16) to have all security fixes applied.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA