Infrastructure
Kubernetes: supported versions and open vulnerabilities today
Kubernetes 1.37, 1.36, 1.35 and 1.34 are supported (1.35 until Feb 28, 2027); 1.33 reached end of life on Jun 28, 2026; the latest release is 1.37.1. No high or critical advisories for Kubernetes were published in the last 12 months (1 lower-severity); none of its advisories is on CISA’s list of exploited vulnerabilities.
Last checked against endoflife.date, OSV.dev, CISA KEV and deps.dev.
- Latest release
- 1.37.1
- GitHub stars
- 128.3k
- Licence
- Apache-2.0
- OpenSSF Scorecard
- 7.2 / 10
Supported versions
Security advisories
1 advisory published in the last 12 months. 50 in total since records began. Checked packages: k8s.io/kubernetes.
Maintenance and supply chain
OpenSSF Scorecard 7.2 / 10 (scored )
The Scorecard rates the repository’s security practices, not known vulnerabilities. Recent activity: 30 commits and 13 issue updates found in the last 90 days.
Weakest checks
- Unpinned build dependencies (Pinned-Dependencies 0/10)
- No static analysis (SAST 0/10)
Production checklist
Kubernetes production checklist: 5 checks before launch
- Should do: Set resource requests and limits on every container
- Should do: Add readiness and liveness probes
- Should do: Least-privilege RBAC for workloads and people
Alternatives
Docker Swarm
Native Docker clustering and orchestration
Strengths
- Easy to learn for Docker users
- Simple setup and configuration
Trade-offs
- Smaller ecosystem than Kubernetes
- Less advanced features
AWS ECS
AWS-managed container orchestration service
Strengths
- Deep AWS integration
- Fully managed (no control plane)
Trade-offs
- AWS vendor lock-in
- Less portable than Kubernetes
Nomad
HashiCorp's flexible workload orchestrator
Strengths
- Simpler than Kubernetes
- Supports containers and non-containerized apps
Trade-offs
- Smaller community than Kubernetes
- Less native cloud integrations
OpenShift
Enterprise Kubernetes platform by Red Hat
Strengths
- Enterprise-grade Kubernetes with added features
- Built-in CI/CD (pipelines, builds)
Trade-offs
- Red Hat ecosystem lock-in
- Heavier resource requirements
Docs and release notes
Check Kubernetes in your own stack
This page checks Kubernetes in general. Your repo pins specific versions: the free dependency check reads your manifests and lists what to fix first. Prism Agent runs the same live checks on your whole stack and turns them into a plan your coding agent can build.