Dependency-Track end of life: end of support by version

OWASP · Development & DevOps

For Dependency-Track by OWASP, patchletter knows 11 support cycles. 9 of them have already ended and receive no more security updates. The next support window closes on 09/12/2026, 31 days from now. The current version of Dependency-Track is 5.2.1. The cycles come from the open endoflife.date project, last reconciled on 07/11/2026.

When does support end for which Dependency-Track version?

A cycle is a maintained version line. Where a date is given, support ends on that day. After it the vendor ships no more security updates for that line.

CycleLatest versionEnd of supportStatus
5.25.2.1no date on recordsupported
5.15.1.231 days agoEnd of Life
5.05.0.573 days agoEnd of Life
4.144.14.631 days leftEOL in 31 days
4.134.13.6244 days agoEnd of Life
4.124.12.7580 days agoEnd of Life
4.114.11.7768 days agoEnd of Life
4.104.10.1915 days agoEnd of Life
4.94.9.11066 days agoEnd of Life
4.84.8.21119 days agoEnd of Life
4.74.7.11300 days agoEnd of Life

Which Dependency-Track versions no longer receive security updates?

9 of 11 cycles have ended. If you run one of those lines, the vendor ships you no more patches, not even for critical flaws.

  • Dependency-Track 5.15.1.2
  • Dependency-Track 5.05.0.5
  • Dependency-Track 4.134.13.6
  • Dependency-Track 4.124.12.7
  • Dependency-Track 4.114.11.7
  • Dependency-Track 4.104.10.1
  • Dependency-Track 4.94.9.1
  • Dependency-Track 4.84.8.2
  • Dependency-Track 4.74.7.1

Where does the EOL data for Dependency-Track come from?

From the open endoflife.date project, which collects vendors' official support commitments. patchletter reconciles the cycles daily; the Dependency-Track data is as of 07/11/2026. In case of doubt the vendor's own lifecycle page applies. patchletter deliberately stores no vendor full texts.

New Dependency-Track versions by email

Tick the product and patchletter reports new releases by email. The update email costs nothing, and one click stops it again. The warning 90, 30 and 7 days before support ends is part of patchletter Pro.