MongoDB 4.0 lifecycle
Current status
MongoDB 4.0 reached end of life on 30 Apr 2022. Security and bug fixes are no longer provided by the project according to published lifecycle data.
Official lifecycle source: MongoDB Server lifecycle schedule
- Support phase
- end of life
- End of life
- 30 Apr 2022
- Latest release
- —
- Released
- —
At a glance
- Version line
- 4.0
- Initial release
- 1 Jun 2018
- Lifecycle phase
- end of life
- Latest stable
- —
- Latest release date
- —
- EOL
- 30 Apr 2022
- Risk
- high
- Releases tracked
- 0
Lifecycle timeline
Phases from published LifecyclePeriod records. Missing phases are not inferred.
Release
1 Jun 2018
standard support
1 Jun 2018 → 30 Apr 2022
Source: MongoDB Server lifecycle schedule
end of lifecurrent
30 Apr 2022 → —
Source: MongoDB Server lifecycle schedule
MongoDB 4.0 reached end of life on 30 Apr 2022. Security and bug fixes are no longer provided by the project according to published lifecycle data.
Security
Advisories affecting MongoDB 4.0 (OSV.dev evidence). Known exploited status, due dates, and ransomware use from CISA KEV when matched.
- Known vulnerabilities
- 10
- Known exploited
- 0
- Highest CVSS
- —
- CVE-2018-25004
- Affected:
- >=4.0.0,<4.0.6
- Fixed in:
- 4.0.6
- Source:
- OSV source
- CVE-2020-7929
- Affected:
- >=4.0.0,<4.0.20
- Fixed in:
- 4.0.20
- Source:
- OSV source
- CVE-2018-20803
- Affected:
- >=4.0.0,<4.0.5
- Fixed in:
- 4.0.5
- Source:
- OSV source
- CVE-2019-20923
- Affected:
- >=4.0.0,<4.0.7
- Fixed in:
- 4.0.7
- Source:
- OSV source
- CVE-2018-20805
- Affected:
- >=4.0.0,<4.0.5
- Fixed in:
- 4.0.5
- Source:
- OSV source
- CVE-2018-20804
- Affected:
- >=4.0.0,<4.0.10
- Fixed in:
- 4.0.10
- Source:
- OSV source
- CVE-2018-20802
- Affected:
- >=4.0.0,<4.0.3
- Fixed in:
- 4.0.3
- Source:
- OSV source
- CVE-2019-2390
- Affected:
- >=4.0.0,<4.0.11
- Fixed in:
- 4.0.11
- Source:
- OSV source
- CVE-2019-2389
- Affected:
- >=4.0.0,<4.0.11
- Fixed in:
- 4.0.11
- Source:
- OSV source
- CVE-2019-2386
- Affected:
- >=4.0.0,<4.0.9
- Fixed in:
- 4.0.9
- Source:
- OSV source · Advisory
Latest release
No releases recorded for this line.
Should I use this version?
Not recommended for new deployments
Upgrade to a currently supported release line. Recommended target: MongoDB 8.0.
Upgrade options
Newer supported MongoDB version lines from CompatHub lifecycle data. Compatibility and security context use existing evidence only.
You are on MongoDB 4.0
End of lifeEOL 30 April 2022
Supported upgrade options
- MongoDB 8.0Upgrade planner →SupportedEOL 31 October 2029· ~90 months more support· 4 major versions newer
- MongoDB 7.0Upgrade planner →SupportedEOL 31 August 2027· ~64 months more support· 3 major versions newer
Version comparison
Compact comparison against the nearest relevant release lines.
Sources
Where this information comes from.
Lifecycle sources
- MongoDB Server lifecycle schedulefirst party · high confidence
Official source: https://www.mongodb.com/legal/support-policy/lifecycles
Last verified 1 Sept 2026
- OSV.devfirst party
Official source: https://osv.dev
Verification time not recorded
- NVD (NIST)first party
Official source: https://nvd.nist.gov
Verification time not recorded
- CISA Known Exploited Vulnerabilitiesfirst party
Official source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Verification time not recorded
Release sources
- MongoDB Server lifecycle schedulefirst party · high confidence
Official source: https://www.mongodb.com/legal/support-policy/lifecycles
Last verified 1 Sept 2026
- MongoDB Server release notesfirst party
Official source: https://www.mongodb.com/docs/manual/release-notes/
Verification time not recorded
Data coverage
Last checked = last successful upstream check. Latest source update = when upstream content last changed.
- Releases tracked
- 0
- Lifecycle periods
- 2
- EOL
- Known
- Provenance records
- 3
- Data last checked
- 1 Sept 2026
- Latest source update
- 1 Sept 2026