Keycloak 10.x — End of Life

EOL
EOL: Jul 22, 20201 release in this series0 CVEs

Keycloak 10.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatus
10.0Apr 29, 2020Jul 22, 202010.0.2EOL

CVEs affecting Keycloak 10.x (0)

No CVEs tracked for Keycloak 10.x.

Keycloak 10.x is EOL — migrate to Keycloak 11.x

Keycloak 11.x is the next major release. Plan your upgrade before Keycloak 10.x stops receiving security patches.

See Keycloak 11.x

Frequently asked questions

Is Keycloak 10 end of life?

Yes. All Keycloak 10.x releases have reached end of life and no longer receive security patches. Migrate to Keycloak 11.x as soon as possible.

What CVEs affect Keycloak 10?

No CVEs are currently tracked for Keycloak 10.x in our database. This may mean no vulnerabilities have been recorded yet, or the data is still syncing.

What is the latest Keycloak 10 version?

The latest Keycloak 10.x patch release is 10.0.2, released on June 2, 2020. Always run the latest patch to benefit from all security fixes.

How to migrate from Keycloak 10 to Keycloak 11?

To migrate from Keycloak 10 to Keycloak 11: (1) review the official Keycloak 11 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.

Is it safe to run Keycloak 10 in production?

No. Keycloak 10 has reached end of life and security vulnerabilities are no longer patched. Upgrade to a supported version immediately.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA