Synced 16 Jun 2026 15:24 UTC Account

Is Mastodon 3.5.19 patched?

Mastodon · cycle 3.5 · end of life · Official site ↗
3.5.1940/100End of life

Current stable (4.5.11): 100/100

Minimum safe version4.3.22

3.5.19 has 5 open critical-or-high vulnerabilities. Run 4.3.22 or later to clear them. See what 4.3.22 fixes →

Health score40/100
Open issues18
Exploited now0
Cycle 3.5 EOL2023-12-31
Latest release4.5.11

Summary iPlain-English security status for Mastodon 3.5.19, built from its CVEs, active-exploitation data, end-of-life date and latest release.

Mastodon 3.5.19 is part of the 3.5 release line. 18 known vulnerabilities affect it. The minimum safe version is 4.3.22 — upgrade to it or later to clear the open critical/high issues. The 3.5 line reached end-of-life on 2023-12-31, so it no longer receives security patches. The latest supported Mastodon release is 4.5.11.

Known issues affecting 3.5.19

Exploited first, then by exploitation probability.

CVE-2022-46405 HIGH EPSS 1% → see advisory CVE-2024-37903 HIGH EPSS 1% → fixed in 4.2.10 CVE-2026-33868 MEDIUM EPSS 1% → fixed in 4.5.8 CVE-2025-54879 MEDIUM EPSS 1% → fixed in 4.4.3 CVE-2026-23962 HIGH EPSS 0% → fixed in 4.5.5 CVE-2026-23961 MEDIUM EPSS 0% → fixed in 4.5.5 CVE-2026-25540 MEDIUM EPSS 0% → fixed in 4.5.6 CVE-2024-34535 MEDIUM EPSS 0% → see advisory CVE-2025-27399 MEDIUM EPSS 0% → fixed in 4.3.4 CVE-2026-23963 MEDIUM EPSS 0% → fixed in 4.5.5 CVE-2025-62176 MEDIUM EPSS 0% → fixed in 4.4.6 CVE-2026-22245 HIGH EPSS 0% → fixed in 4.5.4 CVE-2026-22246 MEDIUM EPSS 0% → fixed in 4.5.4 CVE-2026-41259 HIGH EPSS 0% → fixed in 4.5.9 CVE-2025-62175 MEDIUM EPSS 0% → fixed in 4.4.6 CVE-2026-23964 MEDIUM EPSS 0% → fixed in 4.5.5 CVE-2025-62174 LOW EPSS 0% → fixed in 4.4.6 CVE-2025-67500 LOW EPSS 0% → fixed in 4.5.3

Other Mastodon versions

Check another release line of Mastodon.

Mastodon 4.5.11Mastodon 4.4.18Mastodon 4.3.23Mastodon 4.2.29Mastodon 4.1.25Mastodon 4.0.15Mastodon 3.4.10Mastodon 3.3.3Mastodon 3.2.2Mastodon 3.1.5Mastodon 3.0.2Mastodon 2.9.4Mastodon 1.6.1

Frequently asked

Is Mastodon 3.5.19 patched?

Mastodon 3.5.19 is end-of-life and no longer receives security patches. Move to 4.5.11.

What version should I upgrade Mastodon 3.5.19 to?

Upgrade Mastodon 3.5.19 to at least 4.3.22 to clear its 5 open critical-or-high vulnerabilities.

When does Mastodon 3.5 reach end-of-life?

Mastodon 3.5 reached end-of-life on 2023-12-31 and no longer receives security patches.

What is the latest version of Mastodon?

The latest supported Mastodon release is 4.5.11.

Is Mastodon 3.5.19 still receiving security updates?

No — Mastodon 3.5.19 is on the 3.5 line, which reached end-of-life on 2023-12-31 and no longer receives security updates. Upgrade to 4.5.11 or later to stay supported.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Mastodon's official advisory before you patch or upgrade — Mastodon official site ↗