Is DuckDB 1.5.6 patched?
Current stable (2.0.0): 20/100
Summary iPlain-English security status for DuckDB 1.5.6, built from its CVEs, active-exploitation data, end-of-life date and latest release.
DuckDB 1.5.6 is part of the 1.5 release line. 1 actively-exploited vulnerability affects it (CISA KEV). The 1.5 line is supported until 2027-03-01. The latest supported DuckDB release is 2.0.0.
Known issues affecting 1.5.6
Exploited first, then by exploitation probability.
CVE-2026-111497 CRITICAL exploited EPSS 83% → see advisoryOther DuckDB versions
Check another release line of DuckDB.
Frequently asked
Is DuckDB 1.5.6 patched?
No — 1 actively-exploited vulnerability affects DuckDB 1.5.6. Upgrade now.
When does DuckDB 1.5 reach end-of-life?
DuckDB 1.5 is supported until 2027-03-01.
What is the latest version of DuckDB?
The latest supported DuckDB release is 2.0.0.
Is DuckDB 1.5.6 still receiving security updates?
Yes — the 1.5 line is still supported until 2027-03-01 and receiving security updates. The latest release is 2.0.0.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against DuckDB's official advisory before you patch or upgrade — DuckDB official site ↗