Contao 4.x — End of Life

EOL
EOL: Feb 14, 20266 releases in this series0 CVEs

Contao 4.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatus
4.13LTSFeb 17, 2022Feb 14, 2025Feb 14, 20264.13.58EOL
4.12Aug 19, 2021Jan 14, 2022Jan 14, 20224.12.7EOL
4.11Feb 17, 2021Aug 14, 2021Aug 14, 20214.11.9EOL
4.10Aug 18, 2020Feb 14, 2021Feb 14, 20214.10.7EOL
4.9LTSFeb 18, 2020Feb 14, 2023Feb 14, 20244.9.42EOL
4.4LTSJun 15, 2017Dec 14, 2020Dec 14, 20214.4.57EOL

CVEs affecting Contao 4.x (0)

No CVEs tracked for Contao 4.x.

Contao 4.x is EOL — migrate to Contao 5.x

Contao 5.x is the next major release. Plan your upgrade before Contao 4.x stops receiving security patches.

See Contao 5.x

Frequently asked questions

Is Contao 4 end of life?

Yes. All Contao 4.x releases have reached end of life and no longer receive security patches. Migrate to Contao 5.x as soon as possible.

What CVEs affect Contao 4?

No CVEs are currently tracked for Contao 4.x in our database. This may mean no vulnerabilities have been recorded yet, or the data is still syncing.

What is the latest Contao 4 version?

The latest Contao 4.x patch release is 4.13.58, released on November 26, 2025. Always run the latest patch to benefit from all security fixes.

How to migrate from Contao 4 to Contao 5?

To migrate from Contao 4 to Contao 5: (1) review the official Contao 5 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.

Is it safe to run Contao 4 in production?

No. Contao 4 has reached end of life and security vulnerabilities are no longer patched. Upgrade to a supported version immediately.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA