The current version of Sonatype Nexus Repository is 3.96.4-01 (as of 30/09/2026). patchletter checks the official source daily and emails you new releases.
Actively exploited vulnerabilities
The US cybersecurity agency CISA lists these vulnerabilities in its catalog of Known Exploited Vulnerabilities. What CISA does not carry does not appear in this list — even where it is being exploited.
- CVE-2019-7238Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
9.8 critical · over the network, without login · CISA deadline was 10 Jun 22
- CVE-2020-10199Sonatype Nexus Repository Remote Code Execution Vulnerability
8.8 high · over the network, with a basic account · CISA deadline was 3 May 22
Source: CISA KEV. The CVE is matched to the product automatically — when in doubt, the linked NVD entry applies.
Support cycles (endoflife.date)
| Cycle | Latest version | Status |
|---|---|---|
| 3.96 | 3.96.4-01 | EOL 1 Mar 28 |
| 3.95 | 3.95.4-01 | EOL 5 Feb 28 |
| 3.94 | 3.94.2-01 | EOL 9 Jan 28 |
| 3.93 | 3.93.2-01 | EOL 4 Dec 27 |
| 3.92 | 3.92.3-01 | EOL 7 Nov 27 |
| 3.91 | 3.91.1-04 | EOL 7 Oct 27 |
| 3.90 | 3.90.5-01 | EOL 5 Sept 27 |
| 3.89 | 3.89.1-02 | EOL 3 Aug 27 |
Version history & changelog · as detected by patchletter
| Version | Channel | Date | Notes |
|---|---|---|---|
| 3.96.4-01 | STABLE | 30/09/2026 | – |
| 3.96.3-01 | STABLE | 22/09/2026 | – |
| 3.96.2-01 | STABLE | 18/09/2026 | – |
| 3.96.1-01 | STABLE | 12/09/2026 | – |
| 3.96.0-09 | STABLE | 01/09/2026 | – |
| 3.95.3-02 | STABLE | 27/08/2026 | – |
| 3.95.2-01 | STABLE | 22/08/2026 | – |
Frequently asked questions
- What is the latest version of Sonatype Nexus Repository?
- Sonatype Nexus Repository 3.96.4-01, released 30/09/2026. patchletter checks the vendor's official source daily for new releases.
- Where can I find the Sonatype Nexus Repository release notes?
- The version history above links to the vendor's official release notes where the vendor publishes them. patchletter deliberately stores no vendor full texts.
- How do I get notified about new Sonatype Nexus Repository updates?
- Tick Sonatype Nexus Repository off in the catalogue and leave your address. From then on new versions go out by email — one at a time, or bundled in the daily or weekly digest.
An email as soon as a new Sonatype Nexus Repository version ships
We reconcile the vendor source daily. When a new version appears, it lands in your inbox right away or bundled as a digest. The update email is free and ends with one click. Alerts about vulnerabilities and end of support are part of patchletter Pro.
Embed this badge
The badge shows the current Sonatype Nexus Repository version and keeps it up to date. Anyone may embed it, no account needed.
[](https://patchletter.com/en/software/nexus)https://patchletter.com/badge/nexus.svgAlso available: ?v=eol (end of support) and ?v=cve (actively exploited).
