DuckDB: versions, end of support and vulnerabilities
Release branches of DuckDB with the latest version, the end of support and the vulnerabilities that are still open in the latest version.
The NVD lists 3 vulnerabilities for DuckDB, 1 of them actively exploited. Last checked on 03/11/2026.
Release branches
DuckDB 2.0
Latest version: 2.0.0, released on 21/10/2026
End of support: 21/10/2027
1 known vulnerability open in 2.0.0
DuckDB 1.5
Latest version: 1.5.6, released on 28/09/2026
End of support: 01/03/2027
1 known vulnerability open in 1.5.6
DuckDB 1.4
Latest version: 1.4.5, released on 17/06/2026
End of support: 17/11/2026
1 known vulnerability open in 1.4.5
DuckDB 1.3
Latest version: 1.3.2, released on 08/07/2025
End of support: 16/09/2025
1 known vulnerability open in 1.3.2
DuckDB 1.2
Latest version: 1.2.2, released on 08/04/2025
End of support: 21/05/2025
1 known vulnerability open in 1.2.2
DuckDB 1.1
Latest version: 1.1.3, released on 04/11/2024
End of support: 05/02/2025
1 known vulnerability open in 1.1.3
DuckDB 1.0
Latest version: 1.0.0, released on 03/06/2024
End of support: 09/09/2024
2 known vulnerabilities open in 1.0.0
Most recent vulnerabilities of DuckDB
- CVE-2026-111497, CVSS 4.0: 9.2, actively exploited, 22/10/2026
- CVE-2025-64429, CVSS 4.0: 6.9, 12/11/2025
- CVE-2024-41672, CVSS 3.1: 7.5, 24/07/2024
Get notified
Add DuckDB with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add DuckDB