Apache Nifi 2.x — End of Life

Active
13 releases in this series0 CVEs

Apache Nifi 2.x is partially supported: only 2.12 still receives security fixes. The most recent release in this series is 2.12.0. No CVE is currently tracked for Apache Nifi 2.x.

Apache Nifi 2.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatusAlert me
2.12Sep 13, 2026—No2.12.0Active
2.11Aug 3, 2026—Sep 13, 20262.11.0EOL
2.10Jun 18, 2026—Aug 3, 20262.10.0EOL
2.9Apr 10, 2026—Jun 18, 20262.9.0EOL
2.8Feb 13, 2026—Apr 10, 20262.8.0EOL
2.7Dec 9, 2025—Feb 13, 20262.7.2EOL
2.6Sep 21, 2025—Dec 9, 20252.6.0EOL
2.5Jul 22, 2025—Sep 21, 20252.5.0EOL
2.4May 1, 2025—Jul 22, 20252.4.0EOL
2.3Mar 11, 2025—May 1, 20252.3.0EOL
2.2Jan 27, 2025—Mar 11, 20252.2.0EOL
2.1Dec 23, 2024—Jan 27, 20252.1.0EOL
2.0Nov 1, 2024—Dec 23, 20242.0.0EOL

CVEs affecting Apache Nifi 2.x (0)

No CVEs tracked for Apache Nifi 2.x.

Add a Apache Nifi 2 EOL badge to your README

Show your users which Apache Nifi version your project runs and whether it is still supported. The badge updates automatically. More formats and options →

Apache Nifi 2 EOL status
[![Apache Nifi 2 EOL status](https://eolcanary.com/badge/apache-nifi/2.svg)](https://eolcanary.com/explore/apache-nifi/2)

Frequently asked questions

Is Apache Nifi 2 end of life?

Partially. 12 of the 13 Apache Nifi 2.x releases have reached end of life. Still supported: 2.12.

What CVEs affect Apache Nifi 2?

No CVEs are currently tracked for Apache Nifi 2.x in the NVD data we monitor.

What is the latest Apache Nifi 2 version?

The latest Apache Nifi 2.x patch release is 2.12.0, released on September 13, 2026. Always run the latest patch to benefit from all security fixes.

When was Apache Nifi 2 first released?

Apache Nifi 2.0 was released on November 1, 2024. See the full version timeline in the table above.

Is it safe to run Apache Nifi 2 in production?

Only on a supported release (2.12). Make sure you run the latest patch (2.12.0) to have all security fixes applied.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA