Observability

Jaeger: supported versions and open vulnerabilities today

Jaeger 2 is supported; 1 reached end of life on Dec 31, 2025; the latest release is 2.22.0. No advisories for Jaeger were published in the last 12 months; none of its advisories is on CISA’s list of exploited vulnerabilities.

Last checked against endoflife.date, OSV.dev, CISA KEV and deps.dev.

Latest release
2.22.0
GitHub stars
23.3k
Licence
Apache-2.0
OpenSSF Scorecard
8 / 10

Supported versions

Jaeger release lines and security support dates from endoflife.date
VersionSecurity supportLatestReleased
Jaeger 2Supported: No end date announced2.22.0
Jaeger 1Ended: Ended 1.76.0

Security advisories

OSV.dev, CISA KEV and FIRST EPSS

No advisories published in the last 12 months. 2 in total since records began. Checked packages: github.com/jaegertracing/jaeger.

All github.com/jaegertracing/jaeger advisories on OSV.dev

Maintenance and supply chain

OpenSSF Scorecard 8 / 10 (scored )

The Scorecard rates the repository’s security practices, not known vulnerabilities. Recent activity: 30 commits and 8 issue updates found in the last 90 days.

Weakest checks

  • Over-privileged CI tokens (Token-Permissions 0/10)
  • No fuzzing (Fuzzing 0/10)

Full ScorecardSource repository

Check Jaeger in your own stack

This page checks Jaeger in general. Your repo pins specific versions: the free dependency check reads your manifests and lists what to fix first. Prism Agent runs the same live checks on your whole stack and turns them into a plan your coding agent can build.