Ruby 2.x — End of Life

EOL
EOL: Mar 31, 20238 releases in this series0 CVEs

Ruby 2.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatus
2.7Dec 25, 2019Mar 31, 20232.7.8EOL
2.6Dec 25, 2018Mar 31, 20222.6.10EOL
2.5Dec 25, 2017Mar 31, 20212.5.9EOL
2.4Dec 23, 2016Mar 31, 20202.4.10EOL
2.3Dec 24, 2015Mar 31, 20192.3.8EOL
2.2Dec 25, 2014Mar 31, 20182.2.10EOL
2.1Dec 25, 2013Mar 31, 20172.1.10EOL
2.0.0Feb 24, 2013Feb 24, 20162.0.0p648EOL

CVEs affecting Ruby 2.x (0)

No CVEs tracked for Ruby 2.x.

Ruby 2.x is EOL — migrate to Ruby 3.x

Ruby 3.x is the next major release. Plan your upgrade before Ruby 2.x stops receiving security patches.

See Ruby 3.x

Frequently asked questions

Is Ruby 2 end of life?

Yes. All Ruby 2.x releases have reached end of life and no longer receive security patches. Migrate to Ruby 3.x as soon as possible.

What CVEs affect Ruby 2?

No CVEs are currently tracked for Ruby 2.x in our database. This may mean no vulnerabilities have been recorded yet, or the data is still syncing.

What is the latest Ruby 2 version?

The latest Ruby 2.x patch release is 2.7.8, released on March 30, 2023. Always run the latest patch to benefit from all security fixes.

How to migrate from Ruby 2 to Ruby 3?

To migrate from Ruby 2 to Ruby 3: (1) review the official Ruby 3 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.

Is it safe to run Ruby 2 in production?

No. Ruby 2 has reached end of life and security vulnerabilities are no longer patched. Upgrade to a supported version immediately.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA

© 2026 EOLCanary — Data from endoflife.date & NVD
Explore