Is Contao 4.9.42 patched?

Contao · cycle 4.9 · end of life · Official site ↗

4.9.4240/100End of life

Current stable (5.7.7): 100/100

Minimum safe version4.13.49

4.9.42 has 2 open critical-or-high vulnerabilities. Run 4.13.49 or later to clear them. See what 4.13.49 fixes →

Health score40/100

Open issues11

Exploited now0

Cycle 4.9 EOL2024-02-14

Latest release5.7.7

Summary iPlain-English security status for Contao 4.9.42, built from its CVEs, active-exploitation data, end-of-life date and latest release.

Contao 4.9.42 is part of the 4.9 release line. 11 known vulnerabilities affect it. The minimum safe version is 4.13.49 — upgrade to it or later to clear the open critical/high issues. The 4.9 line reached end-of-life on 2024-02-14, so it no longer receives security patches. The latest supported Contao release is 5.7.7.

Known issues affecting 4.9.42

Exploited first, then by exploitation probability.

CVE-2024-28235 HIGH EPSS 1% → fixed in 5.3.4 CVE-2024-28234 MEDIUM EPSS 1% → fixed in 5.3.4 CVE-2024-45398 HIGH EPSS 1% → fixed in 5.4.3 CVE-2024-28190 MEDIUM EPSS 1% → fixed in 5.3.4 CVE-2024-28191 LOW EPSS 0% → fixed in 5.3.4 CVE-2024-30262 MEDIUM EPSS 0% → fixed in 4.13.40 CVE-2024-45604 MEDIUM EPSS 0% → fixed in 4.13.49 CVE-2024-45965 MEDIUM EPSS 0% → fixed in 5.5.6 CVE-2025-29790 MEDIUM EPSS 0% → fixed in 5.5.6 CVE-2025-65960 MEDIUM EPSS 0% → fixed in 5.6.5 CVE-2025-65961 LOW EPSS 0% → fixed in 5.6.5

Other Contao versions

Check another release line of Contao.

Contao 5.7.7 Contao 5.6.11 Contao 5.5.16 Contao 5.4.14 Contao 5.3.46 Contao 5.2.10 Contao 5.1.11 Contao 5.0.10 Contao 4.13.58 Contao 4.12.7 Contao 4.11.9 Contao 4.10.7 Contao 4.4.57 Contao 3.5.40

Frequently asked

Is Contao 4.9.42 patched?

Contao 4.9.42 is end-of-life and no longer receives security patches. Move to 5.7.7.

What version should I upgrade Contao 4.9.42 to?

Upgrade Contao 4.9.42 to at least 4.13.49 to clear its 2 open critical-or-high vulnerabilities.

When does Contao 4.9 reach end-of-life?

Contao 4.9 reached end-of-life on 2024-02-14 and no longer receives security patches.

What is the latest version of Contao?

The latest supported Contao release is 5.7.7.

Is Contao 4.9.42 still receiving security updates?

No — Contao 4.9.42 is on the 4.9 line, which reached end-of-life on 2024-02-14 and no longer receives security updates. Upgrade to 5.7.7 or later to stay supported.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Contao's official advisory before you patch or upgrade — Contao official site ↗