Log4j 2.x — End of Life
ActiveLog4j 2.x is partially supported: only 2 still receives security fixes. The most recent release in this series is 2.12.4. No CVE is currently tracked for Log4j 2.x.
Log4j 2.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 2.12 | Jun 26, 2019 | — | Dec 14, 2021 | 2.12.4 | EOL | |
| 2.3 | May 10, 2015 | — | Sep 20, 2015 | 2.3.2 | EOL | |
| 2 | Jul 12, 2014 | — | No | 2.26.1 | Active |
CVEs affecting Log4j 2.x (0)
Add a Log4j 2 EOL badge to your README
Show your users which Log4j version your project runs and whether it is still supported. The badge updates automatically. More formats and options →
[](https://eolcanary.com/explore/log4j/2)Frequently asked questions
Is Log4j 2 end of life?
Partially. 2 of the 3 Log4j 2.x releases have reached end of life. Still supported: 2.
What CVEs affect Log4j 2?
No CVEs are currently tracked for Log4j 2.x in the NVD data we monitor.
What is the latest Log4j 2 version?
The latest Log4j 2.x patch release is 2.12.4, released on December 28, 2021. Always run the latest patch to benefit from all security fixes.
When was Log4j 2 first released?
Log4j 2 was released on July 12, 2014. See the full version timeline in the table above.
Is it safe to run Log4j 2 in production?
Only on a supported release (2). Make sure you run the latest patch (2.26.1) to have all security fixes applied.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA