Dependency Track 4.x — End of Life
EOL soonDependency Track 4.x is partially supported: only 4.14 still receives security fixes until Dec 9, 2026, in 63 days. The most recent release in this series is 4.14.5. No CVE is currently tracked for Dependency Track 4.x. The next major version is Dependency Track 5. See Dependency Track 5 →
Dependency Track 4.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 4.14 | Mar 9, 2026 | — | Dec 9, 2026 | 4.14.5 | EOL soon | |
| 4.13 | Apr 7, 2025 | — | Mar 9, 2026 | 4.13.6 | EOL | |
| 4.12 | Oct 1, 2024 | — | Apr 7, 2025 | 4.12.7 | EOL | |
| 4.11 | May 7, 2024 | — | Oct 1, 2024 | 4.11.7 | EOL | |
| 4.10 | Dec 8, 2023 | — | May 7, 2024 | 4.10.1 | EOL | |
| 4.9 | Oct 16, 2023 | — | Dec 8, 2023 | 4.9.1 | EOL | |
| 4.8 | Apr 18, 2023 | — | Oct 16, 2023 | 4.8.2 | EOL | |
| 4.7 | Dec 16, 2022 | — | Apr 18, 2023 | 4.7.1 | EOL |
CVEs affecting Dependency Track 4.x (0)
Dependency Track 4.x will reach end of life — migrate to Dependency Track 5.x
Dependency Track 5.x is the next major release. Plan your upgrade before Dependency Track 4.x stops receiving security patches.
Add a Dependency Track 4 EOL badge to your README
Show your users which Dependency Track version your project runs and whether it is still supported. The badge updates automatically. More formats and options →
[](https://eolcanary.com/explore/dependency-track/4)Frequently asked questions
Is Dependency Track 4 end of life?
Partially. 7 of the 8 Dependency Track 4.x releases have reached end of life. Still supported: 4.14 (until December 9, 2026 at the latest).
What CVEs affect Dependency Track 4?
No CVEs are currently tracked for Dependency Track 4.x in the NVD data we monitor.
What is the latest Dependency Track 4 version?
The latest Dependency Track 4.x patch release is 4.14.5, released on October 5, 2026. Always run the latest patch to benefit from all security fixes.
How to migrate from Dependency Track 4 to Dependency Track 5?
To migrate from Dependency Track 4 to Dependency Track 5: (1) review the official Dependency Track 5 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run Dependency Track 4 in production?
Only on a supported release (4.14). Support for Dependency Track 4.14 ends on December 9, 2026. Make sure you run the latest patch (4.14.5) to have all security fixes applied.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA