Sonatype Nexus Repository
Sonatype · current 3.95.2-01
The current version of Sonatype Nexus Repository is 3.95.2-01 (as of 22/08/2026). patchletter checks the official source daily and emails you every new release.
Actively exploited vulnerabilities
The US cybersecurity agency CISA lists these vulnerabilities in its catalog of Known Exploited Vulnerabilities. Check your version and patch or mitigate promptly.
- CVE-2019-7238Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
9.8 critical · over the network, without login · CISA deadline was 10 Jun 22
- CVE-2020-10199Sonatype Nexus Repository Remote Code Execution Vulnerability
8.8 high · over the network, with a basic account · CISA deadline was 3 May 22
Source: CISA KEV. The CVE is matched to the product automatically — when in doubt, the linked NVD entry applies.
BSI security advisories
Advisories the German BSI (CERT-Bund) published for this product. Whether your version is affected is stated in the advisory itself.
- http/2 Implementierungen: Schwachstelle ermöglicht Denial of Service
WID-SEC-W-2023-2618 · 14 Aug
- Apache log4j: Schwachstelle ermöglicht Codeausführung
WID-SEC-W-2022-0351 · 8 Jul
Support cycles (endoflife.date)
| Cycle | Latest version | Status |
|---|---|---|
| 3.95 | 3.95.2-01 | EOL 5 Feb 28 |
| 3.94 | 3.94.1-06 | EOL 9 Jan 28 |
| 3.93 | 3.93.2-01 | EOL 4 Dec 27 |
| 3.92 | 3.92.3-01 | EOL 7 Nov 27 |
| 3.91 | 3.91.1-04 | EOL 7 Oct 27 |
| 3.90 | 3.90.5-01 | EOL 5 Sept 27 |
| 3.89 | 3.89.1-02 | EOL 3 Aug 27 |
| 3.88 | 3.88.0-08 | EOL 13 Jul 27 |
Version history & changelog · as detected by patchletter
| Version | Channel | Date | Notes |
|---|---|---|---|
| 3.95.2-01 | STABLE | 22/08/2026 | – |
Frequently asked questions
- What is the latest version of Sonatype Nexus Repository?
- Sonatype Nexus Repository 3.95.2-01, released 22/08/2026. patchletter checks the vendor's official source daily for new releases.
- Where can I find the Sonatype Nexus Repository release notes?
- The version history above links to the vendor's official release notes where the vendor publishes them. patchletter deliberately stores no vendor full texts.
- How do I get notified about new Sonatype Nexus Repository updates?
- Free by email: patchletter reports every new release — instantly or bundled as a digest. Unsubscribe anytime with one click.
Never miss a Sonatype Nexus Repository update
We check the source daily and email you — instantly or as a digest. Free, one-click unsubscribe.
Watch Sonatype Nexus RepositoryEmbed this badge
Shows the current Sonatype Nexus Repository version and updates itself. Free to use, no account needed.
[](https://patchletter.com/en/software/nexus)https://patchletter.com/badge/nexus.svgAlso available: ?v=eol (end of support) and ?v=cve (actively exploited).
