Contao 3.x — End of Life
EOLContao 3.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status |
|---|---|---|---|---|---|
| 3.5LTS | Jun 5, 2015 | Jun 30, 2018 | May 31, 2019 | 3.5.40 | EOL |
CVEs affecting Contao 3.x (0)
Contao 3.x is EOL — migrate to Contao 4.x
Contao 4.x is the next major release. Plan your upgrade before Contao 3.x stops receiving security patches.
Frequently asked questions
Is Contao 3 end of life?
Yes. All Contao 3.x releases have reached end of life and no longer receive security patches. Migrate to Contao 4.x as soon as possible.
What CVEs affect Contao 3?
No CVEs are currently tracked for Contao 3.x in our database. This may mean no vulnerabilities have been recorded yet, or the data is still syncing.
What is the latest Contao 3 version?
The latest Contao 3.x patch release is 3.5.40, released on April 11, 2019. Always run the latest patch to benefit from all security fixes.
How to migrate from Contao 3 to Contao 4?
To migrate from Contao 3 to Contao 4: (1) review the official Contao 4 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run Contao 3 in production?
No. Contao 3 has reached end of life and security vulnerabilities are no longer patched. Upgrade to a supported version immediately.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA