Contour ↗

Project Contour · Cloud / Ingress

Track your version:Monitors Contour and tailors your dashboard to that exact version.

1.33.5 · latest cycle20/100 Critical · exploited

Summary iPlain-English security verdict for Contour, generated from its current health score, actively-exploited vulnerabilities, and latest supported version.

Contour currently scores 20/100 — critical, with active exploitation. 1 of its known vulnerability is being actively exploited in the wild (CISA KEV), including CVE-2023-44487. The latest supported release is 1.33.5. Upgrade immediately and review your exposure to the actively-exploited CVEs below.

Disclosure trend iNew CVEs published for Contour each year (NVD). A higher bar means more disclosures that year — more scrutiny, not necessarily less safe.

'19

'20

'21

'22

'23

'24

'25

'26

Patch priority — what to act on iThe issues to fix first — actively exploited (CISA KEV) first, then by exploitation probability (EPSS), then severity. Each row's "→ fixed in" is the earliest version that patches it; "see advisory" means no fixed version is published.

Most urgent first — actively exploited, then likeliest to be exploited.

CVE-2023-44487 HIGH exploited Uncontrolled resource consumption EPSS 100% → fixed in 2023-10-11 CVE-2024-36539 CRITICAL CWE-277 EPSS 1% → see advisory

See all 5 known Contour CVEs & security history →

Get alerted about Contour

Be emailed the moment Contour gets a newly exploited vulnerability (CISA KEV) or a release reaches end of life. Free · double opt-in · unsubscribe anytime.

We email only on real events for Contour — no marketing, no sharing, and we never know what you run. Track your whole stack →

Versions & lifecycle iWhen each release line stops receiving security patches (end-of-life). After EOL there are no more fixes — plan upgrades before these dates.

How long each Contour release line is supported — and when it sunsets. Select a line for its full report.

Sept8'25 Contour 1.30ended 2025-09-08

May15'25 Contour 1.29ended 2025-05-15

May6'25 Contour 1.28ended 2025-05-06

Jul31'24 Contour 1.27ended 2024-07-31

May7'24 Contour 1.26ended 2024-05-07

Feb12'24 Contour 1.25ended 2024-02-12

Oct30'23 Contour 1.24ended 2023-10-30

Full Contour end-of-life dates & support timeline →

1.33 latest 1.33.5 Supported 1.33.5 → 1.32 latest 1.32.5 Supported 1.32.5 → 1.31 latest 1.31.6 Supported 1.31.6 → 1.30 latest 1.30.5 End of life ended 2025-09-081.30.5 → 1.29 latest 1.29.5 End of life ended 2025-05-151.29.5 → 1.28 latest 1.28.8 End of life ended 2025-05-061.28.8 → 1.27 latest 1.27.4 End of life ended 2024-07-311.27.4 → 1.26 latest 1.26.3 End of life ended 2024-05-071.26.3 → 1.25 latest 1.25.3 End of life ended 2024-02-121.25.3 → 1.24 latest 1.24.6 End of life ended 2023-10-301.24.6 → See all upcoming end-of-life dates →

Frequently asked

Is Contour safe and patched?

What should I do about Contour now?

Upgrade Contour to the latest supported release (1.33.5) or later, which clears the actively-exploited issues affecting older versions, then confirm against Project Contour's official advisory.

When does Contour reach end-of-life?

The latest supported Contour release is 1.33.5. After end-of-life a release no longer receives security patches.

Which versions of Contour are still receiving security updates?

Supported Contour release lines (latest 1.33.5): 1.33, 1.32, 1.31. End-of-life releases no longer receive security patches.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Project Contour's official advisory before you patch or upgrade — Contour official site ↗