Puppet ↗

Puppet · Configuration management

Track your version:Monitors Puppet and tailors your dashboard to that exact version.

8.18.0 · latest cycle77/100 Good

Summary iPlain-English security verdict for Puppet, generated from its current health score, actively-exploited vulnerabilities, and latest supported version.

Puppet currently scores 77/100 — good. No tracked vulnerabilities are currently known to be exploited in the wild. The latest supported release is 8.18.0. It's largely safe; apply minor updates as they appear.

Disclosure trend iNew CVEs published for Puppet each year (NVD). A higher bar means more disclosures that year — more scrutiny, not necessarily less safe.

'19

'20

'21

'22

'23

'24

'25

'26

Patch priority — what to act on iThe issues to fix first — actively exploited (CISA KEV) first, then by exploitation probability (EPSS), then severity. Each row's "→ fixed in" is the earliest version that patches it; "see advisory" means no fixed version is published.

Most urgent first — actively exploited, then likeliest to be exploited.

CVE-2016-2785 CRITICAL Improper access control EPSS 3% → see advisory

See all 42 known Puppet CVEs & security history →

Get alerted about Puppet

Be emailed the moment Puppet gets a newly exploited vulnerability (CISA KEV) or a release reaches end of life. Free · double opt-in · unsubscribe anytime.

We email only on real events for Puppet — no marketing, no sharing, and we never know what you run. Track your whole stack →

Versions & lifecycle iWhen each release line stops receiving security patches (end-of-life). After EOL there are no more fixes — plan upgrades before these dates.

How long each Puppet release line is supported — and when it sunsets. Select a line for its full report.

Apr30'25 Puppet 7ended 2025-04-30

Feb1'23 Puppet 6ended 2023-02-01

Jan1'21 Puppet 5ended 2021-01-01

Oct1'18 Puppet 4ended 2018-10-01

Jan1'17 Puppet 3ended 2017-01-01

Full Puppet end-of-life dates & support timeline →

8 latest 8.18.0 Supported 8.18.0 → 7 latest 7.35.0 End of life ended 2025-04-307.35.0 → 6 latest 6.29.0 End of life ended 2023-02-016.29.0 → 5 latest 5.5.22 End of life ended 2021-01-015.5.22 → 4 latest 4.10.13 End of life ended 2018-10-014.10.13 → 3 latest 3.8.7 End of life ended 2017-01-013.8.7 → See all upcoming end-of-life dates →

Frequently asked

Is Puppet safe and patched?

What should I do about Puppet now?

Upgrade Puppet to the latest supported release (8.18.0) or later and apply available security updates, then confirm against Puppet's official advisory.

When does Puppet reach end-of-life?

The latest supported Puppet release is 8.18.0. After end-of-life a release no longer receives security patches.

Which versions of Puppet are still receiving security updates?

Supported Puppet release lines (latest 8.18.0): 8. End-of-life releases no longer receive security patches.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Puppet's official advisory before you patch or upgrade — Puppet official site ↗