Geoserver 2.x — End of Life
ActiveGeoserver 2.x is partially supported: only 2.28 still receives security fixes. The most recent release in this series is 2.28.6. No CVE is currently tracked for Geoserver 2.x. The next major version is Geoserver 3. See Geoserver 3 →
Geoserver 2.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 2.28 | Oct 14, 2025 | Jun 11, 2026 | No | 2.28.6 | Active | |
| 2.27 | Apr 3, 2025 | Oct 14, 2025 | Jun 11, 2026 | 2.27.7 | EOL | |
| 2.26 | Sep 18, 2024 | Apr 3, 2025 | Oct 14, 2025 | 2.26.4 | EOL | |
| 2.25 | Mar 19, 2024 | Sep 18, 2024 | Apr 3, 2025 | 2.25.7 | EOL | |
| 2.24 | Oct 15, 2023 | Mar 19, 2024 | Sep 18, 2024 | 2.24.5 | EOL |
CVEs affecting Geoserver 2.x (0)
Geoserver 2.x will reach end of life — migrate to Geoserver 3.x
Geoserver 3.x is the next major release. Plan your upgrade before Geoserver 2.x stops receiving security patches.
Add a Geoserver 2 EOL badge to your README
Show your users which Geoserver version your project runs and whether it is still supported. The badge updates automatically. More formats and options →
[](https://eolcanary.com/explore/geoserver/2)Frequently asked questions
Is Geoserver 2 end of life?
Partially. 4 of the 5 Geoserver 2.x releases have reached end of life. Still supported: 2.28.
What CVEs affect Geoserver 2?
No CVEs are currently tracked for Geoserver 2.x in the NVD data we monitor.
What is the latest Geoserver 2 version?
The latest Geoserver 2.x patch release is 2.28.6, released on October 16, 2026. Always run the latest patch to benefit from all security fixes.
How to migrate from Geoserver 2 to Geoserver 3?
To migrate from Geoserver 2 to Geoserver 3: (1) review the official Geoserver 3 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run Geoserver 2 in production?
Only on a supported release (2.28). Make sure you run the latest patch (2.28.6) to have all security fixes applied.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA