Apache Flink: versions, end of support and vulnerabilities
Release branches of Apache Flink with the latest version, the end of support and the vulnerabilities that are still open in the latest version.
The NVD lists 4 vulnerabilities for Apache Flink, 1 of them actively exploited. Last checked on 02/11/2026.
Release branches
Apache Flink 2.3
Latest version: 2.3.0, released on 23/06/2026
End of support: no date known
No known vulnerability open in 2.3.0
Apache Flink 2.1
Latest version: 2.1.3, released on 11/06/2026
End of support: no date known
No known vulnerability open in 2.1.3
Apache Flink 1.20
Latest version: 1.20.5, released on 11/06/2026
End of support: no date known
No known vulnerability open in 1.20.5
Apache Flink 2.2
Latest version: 2.2.1, released on 11/05/2026
End of support: no date known
No known vulnerability open in 2.2.1
Apache Flink 2.0
Latest version: 2.0.2, released on 09/05/2026
End of support: 25/06/2026
No known vulnerability open in 2.0.2
Apache Flink 1.19
Latest version: 1.19.3, released on 07/07/2025
End of support: 01/07/2026
1 known vulnerability open in 1.19.3
Apache Flink 1.18
Latest version: 1.18.1, released on 16/01/2024
End of support: 24/03/2025
1 known vulnerability open in 1.18.1
Apache Flink 1.17
Latest version: 1.17.2, released on 27/11/2023
End of support: 01/08/2024
1 known vulnerability open in 1.17.2
Most recent vulnerabilities of Apache Flink
- CVE-2026-35194, CVSS 3.1: 8.1, 15/05/2026
- CVE-2020-17519, CVSS 3.1: 7.5, actively exploited, 05/01/2021
- CVE-2020-17518, CVSS 3.1: 7.5, 05/01/2021
- CVE-2020-1960, CVSS 3.1: 4.7, 14/05/2020
Get notified
Add Apache Flink with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add Apache Flink