Is Puppet 8.18.0 patched?
8.18.0 has 1 open critical-or-high vulnerability. Run 2019.8.7 or later to clear it. See what 2019.8.7 fixes →
Summary iPlain-English security status for Puppet 8.18.0, built from its CVEs, active-exploitation data, end-of-life date and latest release.
Puppet 8.18.0 is part of the 8.18 release line. 6 known vulnerabilities affect it. The minimum safe version is 2019.8.7 — upgrade to it or later to clear the open critical/high issues. The latest supported Puppet release is 8.18.0.
Known issues affecting 8.18.0
Exploited first, then by exploitation probability.
CVE-2021-27021 HIGH EPSS 1% → fixed in 2021.2.0 CVE-2021-27025 MEDIUM EPSS 1% → fixed in 2021.4.0 CVE-2017-10690 MEDIUM EPSS 1% → fixed in 2017.3.4 CVE-2021-27022 MEDIUM EPSS 1% → fixed in 2021.3.0 CVE-2017-10689 MEDIUM EPSS 0% → fixed in 2017.3.4 CVE-2021-27026 MEDIUM EPSS 0% → fixed in 2021.4.0Other Puppet versions
Check another release line of Puppet.
Frequently asked
Is Puppet 8.18.0 patched?
Puppet 8.18.0 has 1 open critical-or-high vulnerability. The minimum safe version is 2019.8.7 — upgrade to 2019.8.7 or later to clear it.
What version should I upgrade Puppet 8.18.0 to?
Upgrade Puppet 8.18.0 to at least 2019.8.7 to clear its 1 open critical-or-high vulnerability.
What is the latest version of Puppet?
The latest supported Puppet release is 8.18.0.
Is Puppet 8.18.0 still receiving security updates?
Yes — the 8.18 line is still supported and receiving security updates.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Puppet's official advisory before you patch or upgrade — Puppet official site ↗