Kubernetes 1.x — End of Life
EOL soon Medium risk EOL: Oct 28, 2027in 370d22 releases in this series4 CVEs
Kubernetes 1.x is partially supported: only 1.37, 1.36, 1.35, 1.34 still receive security fixes, the longest-lived (1.37) until Oct 28, 2027, in 370 days. The most recent release in this series is 1.37.1. 4 CVEs are tracked for this series. 3 of them were published after the end of life of the affected cycle and will not get an official patch.
Kubernetes 1.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 1.37 | Aug 26, 2026 | Aug 28, 2027 | Oct 28, 2027 | 1.37.1 | Active | |
| 1.36 | Apr 22, 2026 | Apr 28, 2027 | Jun 28, 2027 | 1.36.5 | Active | |
| 1.35 | Dec 17, 2025 | Dec 28, 2026 | Feb 28, 2027 | 1.35.9 | Active | |
| 1.34 | Aug 27, 2025 | Aug 27, 2026 | Oct 27, 2026 | 1.34.12 | EOL soon | |
| 1.33 | Apr 23, 2025 | Apr 28, 2026 | Jun 28, 2026 | 1.33.13 | EOL | |
| 1.32 | Dec 11, 2024 | Dec 28, 2025 | Feb 28, 2026 | 1.32.13 | EOL | |
| 1.31 | Aug 13, 2024 | Aug 28, 2025 | Nov 11, 2025 | 1.31.14 | EOL | |
| 1.30 | Apr 17, 2024 | Apr 28, 2025 | Jul 15, 2025 | 1.30.14 | EOL | |
| 1.29 | Dec 13, 2023 | Dec 28, 2024 | Feb 28, 2025 | 1.29.15 | EOL | |
| 1.28 | Aug 15, 2023 | Aug 28, 2024 | Oct 28, 2024 | 1.28.15 | EOL | |
| 1.27 | Apr 11, 2023 | Apr 28, 2024 | Jun 28, 2024 | 1.27.16 | EOL | |
| 1.26 | Dec 8, 2022 | Dec 28, 2023 | Feb 28, 2024 | 1.26.15 | EOL | |
| 1.25 | Aug 23, 2022 | Aug 27, 2023 | Oct 27, 2023 | 1.25.16 | EOL | |
| 1.24 | May 3, 2022 | May 28, 2023 | Jul 28, 2023 | 1.24.17 | EOL | |
| 1.23 | Dec 7, 2021 | Dec 28, 2022 | Feb 28, 2023 | 1.23.17 | EOL | |
| 1.22 | Aug 4, 2021 | Aug 28, 2022 | Oct 28, 2022 | 1.22.17 | EOL | |
| 1.21 | Apr 8, 2021 | Apr 28, 2022 | Jun 28, 2022 | 1.21.14 | EOL | |
| 1.20 | Dec 8, 2020 | Dec 28, 2021 | Feb 28, 2022 | 1.20.15 | EOL | |
| 1.19 | Aug 26, 2020 | Aug 28, 2021 | Oct 28, 2021 | 1.19.16 | EOL | |
| 1.18 | Mar 25, 2020 | Apr 28, 2021 | Jun 18, 2021 | 1.18.20 | EOL | |
| 1.17 | Dec 7, 2019 | — | Dec 25, 2020 | 1.17.17 | EOL | |
| 1.16 | Sep 18, 2019 | — | Aug 4, 2020 | 1.16.15 | EOL |
CVEs affecting Kubernetes 1.x (51)
| CVE | Severity | CVSS | EPSS | KEV | Cycle | Description | Published |
|---|---|---|---|---|---|---|---|
| CVE-2020-8562 | LOW | 2.2 | 1.08% | — | 1.17 | As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessin… | Feb 1, 2022 |
| CVE-2020-8562 | LOW | 2.2 | 1.08% | — | 1.19 | As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessin… | Feb 1, 2022 |
| CVE-2020-8562 | LOW | 2.2 | 1.08% | — | 1.20 | As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessin… | Feb 1, 2022 |
| CVE-2020-8562 | LOW | 2.2 | 1.08% | — | 1.21 | As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessin… | Feb 1, 2022 |
| CVE-2020-8562 | LOW | 2.2 | 1.08% | — | 1.18 | As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessin… | Feb 1, 2022 |
| CVE-2020-8562 | LOW | 2.2 | 1.08% | — | 1.16 | As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessin… | Feb 1, 2022 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.33 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.28 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.34 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.23 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.20 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.18 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.31 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.32 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.19 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.22 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.30 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.25 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.26 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.35 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.27 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.36 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.29 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.24 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.16 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.17 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2021-25740 | LOW | 3.1 | 1.95% | — | 1.21 | A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would … | Sep 20, 2021 |
| CVE-2020-8561 | MEDIUM | 4.1 | 2.10% | — | 1.21 | A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or… | Sep 20, 2021 |
| CVE-2020-8561 | MEDIUM | 4.1 | 2.10% | — | 1.20 | A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or… | Sep 20, 2021 |
| CVE-2020-8561 | MEDIUM | 4.1 | 2.10% | — | 1.22 | A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or… | Sep 20, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.26 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.16 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.35 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.28 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.27 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.20 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.18 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.36 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.31 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.17 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.32 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.33 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.29 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.19 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.23 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.22 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.24 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.34 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.30 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.25 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
| CVE-2020-8554 | MEDIUM | 6.3 | 9.27% | — | 1.21 | Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter… | Jan 21, 2021 |
Add a Kubernetes 1 EOL badge to your README
Show your users which Kubernetes version your project runs and whether it is still supported. The badge updates automatically. More formats and options →
[](https://eolcanary.com/explore/kubernetes/1)Frequently asked questions
Is Kubernetes 1 end of life?
Partially. 18 of the 22 Kubernetes 1.x releases have reached end of life. Still supported: 1.37, 1.36, 1.35, 1.34 (until October 28, 2027 at the latest).
What CVEs affect Kubernetes 1?
There are 4 CVEs tracked for Kubernetes 1.x. See the full list above with CVSS and EPSS scores.
What is the latest Kubernetes 1 version?
The latest Kubernetes 1.x patch release is 1.37.1, released on September 23, 2026. Always run the latest patch to benefit from all security fixes.
When was Kubernetes 1 first released?
Kubernetes 1.16 was released on September 18, 2019. See the full version timeline in the table above.
Is it safe to run Kubernetes 1 in production?
Only on a supported release (1.37, 1.36, 1.35, 1.34). Support for Kubernetes 1.37 ends on October 28, 2027. Make sure you run the latest patch (1.37.1) to have all security fixes applied.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA