Oniguruma End of Life (EOL) Dates & Support Timeline
Complete end-of-life dates, support windows, and security status for all Oniguruma versions. Data sourced from endoflife.date and official vendor documentation. Updated at every deploy.
⚠All Oniguruma versions are past end of life. No security patches are being issued. Migrate to a supported alternative or purchase extended support.
Latest Active
—
— series
Next EOL
—
None upcoming
Active Versions
0
of 2 total
EOL Versions
2
no longer patched
Release Cycle Timeline
■ EOL
■ Warning
■ Active
┊ Today
All Versions
Version
Latest Release
Release Date
EOL Date
Days
Status
5
5.9.6
Oct 19, 2006
May 9, 2016
3652 days past EOL
EOL
6
6.9.10
May 9, 2016
Apr 24, 2025
380 days past EOL
EOL
What does Oniguruma end of life mean for your organization?
When a Oniguruma version reaches end of life, the maintainers stop issuing security patches. Vulnerabilities discovered after this date are publicly disclosed on the National Vulnerability Database, exploit code appears on GitHub, and your systems remain permanently exposed.
The CVE blind spot: Most vulnerability scanners check for known CVEs but do not flag the accumulation of unpatched vulnerabilities in EOL software. With a zero-day, nobody knows about the vulnerability. With EOL software, the vulnerability is public — listed, rated, and often weaponized — but no patch will ever exist. This is the most dangerous gap in enterprise security posture.
Organizations running EOL Oniguruma should treat it as a vulnerability class in their risk register, apply compensating controls (network segmentation, enhanced monitoring, access restriction), and prioritize migration to a supported version.
Check your full stack for EOL risk
Upload requirements.txt, package.json, or Gemfile — full EOL report instantly.
See the full table above for all Oniguruma version EOL dates.
What is the latest supported version of Oniguruma?
The latest active version of Oniguruma is —. Always verify against the table above as support windows can change.
What happens when Oniguruma reaches end of life?
When Oniguruma reaches end of life, the vendor stops issuing security patches. Any CVEs disclosed after the EOL date accumulate indefinitely with no patch path — creating an ever-growing attack surface that most vulnerability scanners do not flag.
How do I check if I'm running an EOL version of Oniguruma?
Check your current version against the table above. If your version's EOL date has passed, you are running unsupported software. You can also use the endoflife.ai Stack Scanner to check your entire dependency file at once.
Is there extended support available for EOL Oniguruma versions?
Some vendors offer extended support for EOL software. Contact the original vendor or check with enterprise support providers for options.