PRIMARYManual
Apache Airflow 2.x official lifecycle source
2 | 2.11.2 | EOL | Dec 17, 2020 | Oct 22, 2025 | Apr 22, 2026
Publisher identity used by product-specific official-source collectors.
Open official vendor source
← Search results
REVIEWED ORIGINAL-SOURCE CLAIMOFFICIAL VENDOR SOURCEREVIEWED 13 SEP 2026
Apache · EDITORIAL PRIMARY-SOURCE REVIEW
Apache Airflow 2.x
Apache Airflow 2.x is tracked by BlackTree as a software framework or development platform. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.
This claim was manually scoped and reviewed against the linked original publisher statement. It applies only to the named release and support phase. Confirm edition, device and contract applicability before acting.
Claim scope: Apache Airflow core 2.x major version only. Provider distributions, Helm charts, and downstream services have independent version lifecycles.
Reviewed 13 Sep 2026.
Product overview
Apache Airflow 2.x is tracked by BlackTree as a software framework or development platform. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.
Main capabilities
- Application development components
- Versioned runtime or build interfaces
- Security and compatibility maintenance
Typical use
Used by software teams to build, run or maintain applications.
Deployment
Included in source projects, application dependencies, build systems or managed runtimes.
This category-level context is generated from the registered product identity. Confirm exact product capabilities on the publisher's page .
Collected lifecycle data
| Product | Apache Airflow 2.x |
|---|---|
| Release | 2 |
| End of End of life | 22 April 2026 |
| Date precision | Day |
Known exploited vulnerabilities
Catalogue updated 16 Sep 2026These are product-family matches in the CISA Known Exploited Vulnerabilities catalogue. Confirm the affected product version in the vendor advisory.
No CISA known-exploited entries currently match this mapped product family.
This does not mean the product has no vulnerabilities.
Package vulnerability advisories
OSV advisories are matched through the registered package URL. A package-family match does not prove that the installed release is affected. Check the affected and fixed versions before remediation.
No package advisories have been linked for this product identity.
This is not evidence that the product has no vulnerabilities.