Synced 16 Jun 2026 15:24 UTC Account

Is ArangoDB 3.7.18 patched?

ArangoDB · cycle 3.7 · end of life · Official site ↗
3.7.1840/100End of life

Current stable (3.12.9.3): 100/100

Health score40/100
Open issues2
Exploited now0
Cycle 3.7 EOL2022-05-31
Latest release3.12.9.3

Summary iPlain-English security status for ArangoDB 3.7.18, built from its CVEs, active-exploitation data, end-of-life date and latest release.

ArangoDB 3.7.18 is part of the 3.7 release line. 2 known vulnerabilities affect it. The 3.7 line reached end-of-life on 2022-05-31, so it no longer receives security patches. The latest supported ArangoDB release is 3.12.9.3.

Known issues affecting 3.7.18

Exploited first, then by exploitation probability.

CVE-2021-25939 LOW EPSS 1% → see advisory CVE-2021-25940 HIGH EPSS 1% → see advisory

Frequently asked

Is ArangoDB 3.7.18 patched?

ArangoDB 3.7.18 is end-of-life and no longer receives security patches. Move to 3.12.9.3.

When does ArangoDB 3.7 reach end-of-life?

ArangoDB 3.7 reached end-of-life on 2022-05-31 and no longer receives security patches.

What is the latest version of ArangoDB?

The latest supported ArangoDB release is 3.12.9.3.

Is ArangoDB 3.7.18 still receiving security updates?

No — ArangoDB 3.7.18 is on the 3.7 line, which reached end-of-life on 2022-05-31 and no longer receives security updates. Upgrade to 3.12.9.3 or later to stay supported.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against ArangoDB's official advisory before you patch or upgrade — ArangoDB official site ↗