Envoy 1.x — End of Life

EOL soon
EOL: Oct 13, 2027in 355d41 releases in this series0 CVEs

Envoy 1.x is partially supported: only 1.40, 1.39, 1.38, 1.37 still receive security fixes, the longest-lived (1.40) until Oct 13, 2027, in 355 days. The most recent release in this series is 1.40.0. No CVE is currently tracked for Envoy 1.x.

Envoy 1.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatusAlert me
1.40Oct 13, 2026—Oct 13, 20271.40.0Active
1.39Jul 14, 2026—Jul 14, 20271.39.4Active
1.38Apr 23, 2026—Apr 23, 20271.38.7Active
1.37Jan 13, 2026—Jan 13, 20271.37.10EOL soon
1.36Oct 14, 2025—Oct 14, 20261.36.13EOL
1.35Jul 23, 2025—Jul 23, 20261.35.13EOL
1.34Apr 15, 2025—Apr 15, 20261.34.14EOL
1.33Jan 14, 2025—Jan 14, 20261.33.14EOL
1.32Oct 15, 2024—Oct 15, 20251.32.13EOL
1.31Jul 19, 2024—Jul 19, 20251.31.10EOL
1.30Apr 16, 2024—Apr 16, 20251.30.11EOL
1.29Jan 16, 2024—Jan 16, 20251.29.12EOL
1.28Oct 19, 2023—Oct 19, 20241.28.7EOL
1.27Jul 27, 2023—Jul 27, 20241.27.7EOL
1.26Apr 18, 2023—Apr 18, 20241.26.8EOL
1.25Jan 18, 2023—Jan 18, 20241.25.11EOL
1.24Oct 19, 2022—Oct 19, 20231.24.12EOL
1.23Jul 15, 2022—Jul 15, 20231.23.12EOL
1.22Apr 15, 2022—Apr 15, 20231.22.11EOL
1.21Jan 12, 2022—Jan 12, 20231.21.6EOL
1.20Oct 5, 2021—Oct 5, 20221.20.7EOL
1.19Jul 13, 2021—Jul 13, 20221.19.5EOL
1.18Apr 15, 2021—Apr 15, 20221.18.6EOL
1.17Jan 11, 2021—Jan 11, 20221.17.4EOL
1.16Oct 8, 2020—Oct 8, 20211.16.5EOL
1.15Jul 7, 2020—Jul 7, 20211.15.5EOL
1.14Apr 8, 2020—Apr 8, 20211.14.7EOL
1.13Jan 20, 2020—Jan 20, 20211.13.8EOL
1.12Oct 31, 2019—Oct 31, 20201.12.7EOL
1.11Jul 11, 2019—Oct 31, 20191.11.2EOL
1.10Apr 5, 2019—Jul 11, 20191.10.0EOL
1.9Dec 20, 2018—Apr 5, 20191.9.1EOL
1.8Oct 4, 2018—Dec 20, 20181.8.0EOL
1.7Jun 21, 2018—Oct 4, 20181.7.1EOL
1.6Mar 20, 2018—Jun 21, 20181.6.0EOL
1.5Dec 4, 2017—Mar 20, 20181.5.0EOL
1.4Aug 24, 2017—Dec 4, 20171.4.0EOL
1.3May 17, 2017—Aug 24, 20171.3.0EOL
1.2Mar 7, 2017—May 17, 20171.2.0EOL
1.1Nov 30, 2016—Mar 7, 20171.1.0EOL
1.0Sep 12, 2016—Nov 30, 20161.0.0EOL

CVEs affecting Envoy 1.x (0)

No CVEs tracked for Envoy 1.x.

Add a Envoy 1 EOL badge to your README

Show your users which Envoy version your project runs and whether it is still supported. The badge updates automatically. More formats and options →

Envoy 1 EOL status
[![Envoy 1 EOL status](https://eolcanary.com/badge/envoy/1.svg)](https://eolcanary.com/explore/envoy/1)

Frequently asked questions

Is Envoy 1 end of life?

Partially. 37 of the 41 Envoy 1.x releases have reached end of life. Still supported: 1.40, 1.39, 1.38, 1.37 (until October 13, 2027 at the latest).

What CVEs affect Envoy 1?

No CVEs are currently tracked for Envoy 1.x in the NVD data we monitor.

What is the latest Envoy 1 version?

The latest Envoy 1.x patch release is 1.40.0, released on October 13, 2026. Always run the latest patch to benefit from all security fixes.

When was Envoy 1 first released?

Envoy 1.0 was released on September 12, 2016. See the full version timeline in the table above.

Is it safe to run Envoy 1 in production?

Only on a supported release (1.40, 1.39, 1.38, 1.37). Support for Envoy 1.40 ends on October 13, 2027. Make sure you run the latest patch (1.40.0) to have all security fixes applied.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA