Apache Pulsar · Lifecycle Status

Apache Pulsar End of Life (EOL) Dates & Support Timeline

Complete end-of-life dates, support windows, and security status for all Apache Pulsar versions. Data from endoflife.date, checked against the vendor's own lifecycle pages where we have read them (share on /accuracy). Updated at every deploy.

✓ Apache Pulsar 5.0.1 is actively supported. Next EOL: version 5.0 on October 5, 2028.

Apache Pulsar 5.0 is supported until October 5, 2028, its end-of-support date. It is also the next Apache Pulsar version to reach end of life. 14 of 15 tracked Apache Pulsar versions are past end of life; the most recent to reach it, 4.0, did so on October 21, 2026. The full Apache Pulsar lifecycle, with every version's release and end-of-support date, is in the table below.

Running an EOL version? Get matched with support options — free ↓
📅 Get reminded before Apache Pulsar 5.0 reaches EOL on October 5, 2028 — alerts 90, 30 & 7 days out.
Google → Subscribe to all dates
Subscribe keeps every Apache Pulsar end date in your calendar and updates itself. Calendar URL: https://endoflife.ai/calendar/apache-pulsar.ics
✉️ Or get it by email — alerts at 90 / 60 / 30 / 7 days and on the day: Free · one-click unsubscribe in every email · no other mail, ever
Latest Active
5.0.1
5.0 series
Next EOL
5.0
Oct 5, 2028
Active Versions
1
of 15 total
EOL Versions
14
no longer patched
35 / 100
Medium Risk
EOL Risk Score™  How is this calculated? →
EOL Recency
25/40
Attack Surface
10/30 Medium tier
CISA KEV Exposure
0/20 Not in KEV
Extended Support
0/10 Available
EOL Risk Score™ — proprietary methodology by endoflife.ai. Factors: EOL recency, attack surface breadth, CISA KEV catalog presence, extended support availability. Updated at every build. Methodology →
CPE Identifier
cpe:2.3:a:apache:pulsar
The Common Platform Enumeration name vulnerability scanners and CVE records use for Apache Pulsar. Verified against the NIST CPE dictionary. Machine-readable for all products: cpe-map.json
Package URLs (purl)
pkg:docker/apachepulsar/pulsar
pkg:maven/org.apache.pulsar/pulsar
pkg:maven/org.apache.pulsar/pulsar-broker
pkg:github/apache/pulsar
The package URL identifiers SBOM tools emit for Apache Pulsar, so a CycloneDX or SPDX component resolves to this page by exact identifier rather than by name. Machine-readable for all products: purl-map.json; whole-SBOM checks: POST /v1/sbom or the Stack Scanner.
Release Cycle Timeline
■ EOL   ■ Warning   ■ Active   ┊ Today
Release cycle timeline 2020202120222023202420252026202720282.52.62.72.82.92.102.113.03.13.23.34.04.14.25.0TODAY
14 versions of Apache Pulsar are past end of life — standard security patches have stopped; 1 of them is still covered by Extended support. Get matched with support →
All Versions
VersionLatest ReleaseRelease DateEOL DateExtended SupportDaysStatus
2.5 2.5.2 Jan 15, 2020 Jan 15, 2021 — 2122 days past EOL EOL
2.6 2.6.4 Jun 17, 2020 Jun 17, 2021 — 1969 days past EOL EOL
2.7 2.7.5 Dec 3, 2020 Dec 3, 2021 — 1800 days past EOL EOL
2.8 2.8.4 Jun 15, 2021 Jun 15, 2022 — 1606 days past EOL EOL
2.9 2.9.5 Dec 20, 2021 Dec 20, 2022 — 1418 days past EOL EOL
2.10 2.10.6 Apr 18, 2022 Apr 18, 2023 — 1299 days past EOL EOL
2.11 2.11.4 Jan 11, 2023 Jan 11, 2024 — 1031 days past EOL EOL
3.0 LTS 3.0.17 May 2, 2023 May 2, 2025 May 2, 2026
Extended support (ended)
554 days past EOL EOL
3.1 3.1.3 Aug 10, 2023 Feb 10, 2024 — 1001 days past EOL EOL
3.2 3.2.4 Feb 5, 2024 Aug 5, 2024 — 824 days past EOL EOL
3.3 3.3.9 Jun 5, 2024 Dec 5, 2024 — 702 days past EOL EOL
4.0 LTS 4.0.14 Oct 21, 2024 Oct 21, 2026 Oct 21, 2027
Extended support
17 days past EOL EOL
4.1 4.1.3 Sep 8, 2025 Mar 8, 2026 — 244 days past EOL EOL
4.2 4.2.5 Mar 24, 2026 Sep 24, 2026 — 44 days past EOL EOL
5.0 LTS 5.0.1 Oct 5, 2026 Oct 5, 2028 Oct 5, 2029
Extended support
698 days remaining Active
Spotted a date that disagrees with the vendor's own lifecycle page? Report it with the vendor's link → Every correction is published on the accuracy page.
EOL date vs extended support. The EOL Date column is the end of standard, included support. Extended support terms vary by vendor. Check whether the programme covers you before relying on these dates. 1 version of Apache Pulsar is past the standard EOL date but still inside the extended support window.
Apache Pulsar EOL status badge Live EOL badge for your README — updates automatically at every build. [![Apache Pulsar EOL](https://img.shields.io/endpoint?url=https%3A%2F%2Fendoflife.ai%2Fbadge%2Fapache-pulsar.json)](https://endoflife.ai/apache-pulsar)

Apache Pulsar release and support pattern

Across the 15 release lines with a published release date, Apache Pulsar has shipped a new line roughly every 6 months (median interval). A line typically stays in standard support for about 1 year from its release to its standard-support end date. 3 of the 15 tracked lines are designated long-term support, which is where the longer windows sit.

Of the 15 release lines tracked, 14 are past end of life and 1 is still within support. The newest line, 5.0, was released October 5, 2026. The next scheduled end of life is 5.0 on October 5, 2028 — 697 days from this build. Upstream also publishes an extended-support phase for 15 lines, shown in the table above.

Computed from the tracked release data at every build — the figures above are the dates in the table, restated, not an editorial estimate.

What does Apache Pulsar end of life mean for your organization?

When a version of Apache Pulsar reaches end of life, the maintainers stop issuing security patches. Vulnerabilities discovered after this date are publicly disclosed on the National Vulnerability Database, exploit code appears on GitHub, and your systems remain permanently exposed.

The CVE blind spot: A CVE-based scan does not show the accumulation of unpatched vulnerabilities in EOL software. Some scanners flag unsupported versions of common products, but coverage varies, and none of them give you the date in advance. With a zero-day, nobody knows about the vulnerability. With EOL software, the vulnerability is public — listed, rated, and often weaponized — but no vendor patch is coming. This is one of the most dangerous gaps in enterprise security posture.

Organizations running EOL Apache Pulsar should treat it as a vulnerability class in their risk register, apply compensating controls (network segmentation, enhanced monitoring, access restriction), and prioritize migration to a supported version.

Your options when Apache Pulsar reaches end of life

There are four realistic paths. Which one is right depends far more on how long the system needs to keep running than on the version you are on today.

OptionBest whenWatch out for
Move to a supported version The system will outlive the current version's support window and you can schedule the work Budget for compatibility testing, not just the upgrade itself — that is where the real cost sits
Replace the component The project is unmaintained, or a better-supported alternative exists The replacement has its own lifecycle and its own end-of-life date — you are changing vendors, not escaping the problem
Buy extended support Migration is genuinely underway but cannot finish before the deadline, or the workload is frozen by certification or a third-party application A bridge, not a destination — every year purchased is a year the migration still has to happen
Document accepted risk The system is isolated, short-lived, or scheduled for retirement Only defensible with real compensating controls and a written decision — auditors treat undocumented end-of-life software as a finding

How to choose, in one question: how many more years does this system need to run? Under a year, extended support (where it exists) is usually cheaper than an emergency migration. One to three years, migrate — support purchased repeatedly costs more than doing the project once, and the project only gets harder as the version ages. Indefinitely, migrate now and plan the next migration before it surprises you.

Worth saying plainly, because vendors selling extended support rarely will: extended support is often the more expensive choice over a multi-year horizon. It is the right answer when a deadline is genuinely unreachable, not as a default. Compare the annual fee against the one-time cost of migrating before committing to either.

Formalizing decisions like this across your estate? Our free EOL policy template is a ready-to-adopt policy with risk tiers, remediation SLAs, and audit mapping — no signup, free to use and share.

Extended Support Options

If you cannot migrate immediately, check whether the vendor or a third party sells extended support with security patches for your Apache Pulsar version; coverage varies by product and version. Where it exists it is a bridge, not a permanent solution — plan your migration in parallel.

endoflife.ai
Get Apache Pulsar Support Options

Apache Pulsar has 14 versions past end of life — standard security patches have stopped; 1 of them is still covered by Extended support, but CVE disclosures haven't. Extended support past the official date exists for many products in this position — whether it exists for Apache Pulsar is exactly what we check. Tell us where to reach you and we'll reply with matched options and pricing guidance — or an honest "no vendor covers this."

Free · No obligation · Independent — we track the dates, vendors don't pay for placement · Dates verified against vendor sources
Frequently Asked Questions
What is the end-of-life date for Apache Pulsar?
The next Apache Pulsar version reaching EOL is 5.0 on October 5, 2028. See the full table above for all version EOL dates.
When is the Apache Pulsar support end date?
The next Apache Pulsar support end date is October 5, 2028, when version 5.0 reaches end of support. Each version has its own support end date — see the table above for every version's date.
What is the latest supported version of Apache Pulsar?
The latest active version of Apache Pulsar is 5.0.1. Always verify against the table above as support windows can change.
What happens when Apache Pulsar reaches end of life?
When Apache Pulsar reaches end of life, the vendor stops issuing security patches. Any CVEs disclosed after the EOL date accumulate with no vendor patch path — a growing attack surface that a CVE-based scan does not show. Some scanners flag unsupported versions of common products, but coverage varies, and none of them give the date in advance.
How do I check if I'm running an EOL version of Apache Pulsar?
Check your current version against the table above. If your version's EOL date has passed, you are running unsupported software. You can also use the endoflife.ai Stack Scanner to check your entire dependency file at once.
Is there extended support available for EOL Apache Pulsar versions?
Some vendors offer extended support for EOL software. Contact the original vendor or check with enterprise support providers for options.
Deep Dive
Version guide
Apache Pulsar 4.0 LTS: Active Support Ended October 21, 2026
→

Related Products

confidence: 0 high, 45 medium, 0 low (each version page shows where every date comes from) · provenance · Upstream dataset: endoflife.date API · endoflife.date · Generated at build time · How we source data →
Apache Pulsar end-of-life status badge