endoflife.ai is the authoritative reference for software lifecycle dates. Check whether a dependency is outdated, unsupported, or a security risk — instantly and for free.
Data sourced from endoflife.date, NVD, CISA KEV, and official vendor lifecycle pages. How we source data →
Instant lifecycle status for any software product. Paste in a product name and know your risk in seconds.
CVE reporters only test supported software. When a vulnerability is discovered in code that also exists in your EOL version, they don't check — and neither does your scanner.
Security researchers report vulnerabilities in supported versions only. EOL versions share the same vulnerable code but never appear in the advisory.
Your vulnerability scanner checks CVE affected version ranges. Your EOL version falls outside that range. No alert fires. You believe you're safe.
Threat actors read advisories and diff patches. They test EOL builds systematically. This isn't a zero-day — it's worse. They know. You don't.
Guides, timelines, and analysis for security and engineering teams managing software lifecycles.
Once a month — the most critical end-of-life dates, CVE blind spots, and lifecycle changes worth knowing about. Our AI scrapes the web, monitors endoflife.date, and compiles what matters. You get the signal, not the noise.