Gerrit 3.x — End of Life

Active
15 releases in this series0 CVEs

Gerrit 3.x is partially supported: only 3.14, 3.13, 3.12 still receive security fixes. The most recent release in this series is 3.14.4. No CVE is currently tracked for Gerrit 3.x.

Gerrit 3.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatusAlert me
3.14May 15, 2026—No3.14.4Active
3.13Nov 10, 2025—No3.13.10Active
3.12May 19, 2025—No3.12.11Active
3.11Dec 2, 2024—May 15, 20263.11.11EOL
3.10May 17, 2024—Nov 10, 20253.10.9EOL
3.9Nov 25, 2023—May 19, 20253.9.11EOL
3.8May 19, 2023—Dec 2, 20243.8.10EOL
3.7Nov 9, 2022—May 17, 20243.7.9EOL
3.6May 23, 2022—Nov 25, 20233.6.8EOL
3.5Dec 6, 2021—May 19, 20233.5.6EOL
3.4May 17, 2021—Nov 9, 20223.4.8EOL
3.3Dec 1, 2020—May 24, 20223.3.11EOL
3.2Jun 1, 2020—Dec 7, 20213.2.14EOL
3.1Nov 14, 2019—May 19, 20213.1.16EOL
3.0May 15, 2019—Dec 1, 20203.0.16EOL

CVEs affecting Gerrit 3.x (0)

No CVEs tracked for Gerrit 3.x.

Add a Gerrit 3 EOL badge to your README

Show your users which Gerrit version your project runs and whether it is still supported. The badge updates automatically. More formats and options →

Gerrit 3 EOL status
[![Gerrit 3 EOL status](https://eolcanary.com/badge/gerrit/3.svg)](https://eolcanary.com/explore/gerrit/3)

Frequently asked questions

Is Gerrit 3 end of life?

Partially. 12 of the 15 Gerrit 3.x releases have reached end of life. Still supported: 3.14, 3.13, 3.12.

What CVEs affect Gerrit 3?

No CVEs are currently tracked for Gerrit 3.x in the NVD data we monitor.

What is the latest Gerrit 3 version?

The latest Gerrit 3.x patch release is 3.14.4, released on September 23, 2026. Always run the latest patch to benefit from all security fixes.

When was Gerrit 3 first released?

Gerrit 3.0 was released on May 15, 2019. See the full version timeline in the table above.

Is it safe to run Gerrit 3 in production?

Only on a supported release (3.14, 3.13, 3.12). Make sure you run the latest patch (3.14.4) to have all security fixes applied.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA