Synced 16 Jun 2026 15:24 UTC Account

Is Mastodon 2.9.4 patched?

Mastodon · cycle 2.9 · Official site ↗
2.9.45/100Critical

Current stable (4.5.11): 100/100

Minimum safe version4.3.22

2.9.4 has 13 open critical-or-high vulnerabilities. Run 4.3.22 or later to clear them. See what 4.3.22 fixes →

Health score5/100
Open issues30
Exploited now0
Cycle 2.9 EOL—
Latest release4.5.11

Summary iPlain-English security status for Mastodon 2.9.4, built from its CVEs, active-exploitation data, end-of-life date and latest release.

Mastodon 2.9.4 is part of the 2.9 release line. 30 known vulnerabilities affect it. The minimum safe version is 4.3.22 — upgrade to it or later to clear the open critical/high issues. The latest supported Mastodon release is 4.5.11.

Known issues affecting 2.9.4

Exploited first, then by exploitation probability.

CVE-2022-0432 MEDIUM EPSS 4% → fixed in 3.5.0 CVE-2024-23832 CRITICAL EPSS 2% → fixed in 4.2.5 CVE-2022-24307 CRITICAL EPSS 1% → fixed in 3.4.6 CVE-2023-28853 HIGH EPSS 1% → fixed in 4.1.2 CVE-2023-36461 HIGH EPSS 1% → fixed in 4.1.3 CVE-2023-36459 CRITICAL EPSS 1% → fixed in 4.1.3 CVE-2022-2166 CRITICAL EPSS 1% → see advisory CVE-2022-46405 HIGH EPSS 1% → see advisory CVE-2022-31263 MEDIUM EPSS 1% → fixed in 3.5.0 CVE-2023-42451 HIGH EPSS 1% → fixed in 4.1.8 CVE-2023-36462 MEDIUM EPSS 1% → fixed in 4.1.3 CVE-2024-37903 HIGH EPSS 1% → fixed in 4.2.10 CVE-2026-33868 MEDIUM EPSS 1% → fixed in 4.5.8 CVE-2024-25623 HIGH EPSS 1% → fixed in 4.2.7 CVE-2026-23962 HIGH EPSS 0% → fixed in 4.5.5 CVE-2024-25618 MEDIUM EPSS 0% → fixed in 4.2.6 CVE-2026-23961 MEDIUM EPSS 0% → fixed in 4.5.5 CVE-2026-25540 MEDIUM EPSS 0% → fixed in 4.5.6 CVE-2024-34535 MEDIUM EPSS 0% → see advisory CVE-2024-25619 LOW EPSS 0% → fixed in 4.2.6

Other Mastodon versions

Check another release line of Mastodon.

Mastodon 4.5.11Mastodon 4.4.18Mastodon 4.3.23Mastodon 4.2.29Mastodon 4.1.25Mastodon 4.0.15Mastodon 3.5.19Mastodon 3.4.10Mastodon 3.3.3Mastodon 3.2.2Mastodon 3.1.5Mastodon 3.0.2Mastodon 1.6.1

Frequently asked

Is Mastodon 2.9.4 patched?

Mastodon 2.9.4 has 13 open critical-or-high vulnerabilities. The minimum safe version is 4.3.22 — upgrade to 4.3.22 or later to clear them.

What version should I upgrade Mastodon 2.9.4 to?

Upgrade Mastodon 2.9.4 to at least 4.3.22 to clear its 13 open critical-or-high vulnerabilities.

What is the latest version of Mastodon?

The latest supported Mastodon release is 4.5.11.

Is Mastodon 2.9.4 still receiving security updates?

Yes — the 2.9 line is still supported and receiving security updates. The latest release is 4.5.11.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Mastodon's official advisory before you patch or upgrade — Mastodon official site ↗