End of life
Apache Tomcat 7 end-of-life and support dates
Apache Tomcat 7 reached end of support on 2021-03-31. That was 2050 days ago.
Scope: software releaseListed under Apache TomcatAs of 2026-11-10
Lifecycle timeline
- 2010-06-13 — Release date · General availability
- 2021-03-31 — End of support · End of standard support
When is Apache Tomcat 7 end of life?
Apache Tomcat 7 reached end of support on 2021-03-31.
Source: Apache Tomcat versions
Is Apache Tomcat 7 still supported?
No. Support ended on 2021-03-31.
Source: Apache Tomcat versions
What should I upgrade to?
The cited source lists this release as still supported:
- 9.0 — support ends 2027-03-31
Confirm Apache's upgrade path for your edition and contract before planning change work.
Why this status?
“End of support” (end-of-standard-support, 2021-03-31, confirmed) has passed and no later support phase is published.
Evidence
- Apache Tomcat versions Official · checked 2026-11-10
- endoflife.date product data independent-open · checked 2026-11-10
Related
- All Apache Tomcat lifecycle dates· 9 tracked releases
- Apache Tomcat security advisories· 98 tracked
- CVE-2026-86531: Apache The embedded OpenEJB HTTP server does not limit the size of incoming request bodies or of multipart requests, and does not remove the temporary files it creates for multipart parts
- CVE-2026-97870: Apache When Hessian remoting endpoints are served by the embedded HTTP server, configured authentication and transport security requirements are silently ignored
- CVE-2026-97880: Apache The embedded OpenEJB HTTP server dispatches some requests to REST endpoints configured for HTTP Basic authentication without verifying credentials
- CVE-2026-97881: Apache The embedded OpenEJB HTTP server does not restrict static resource paths to the configured resource directories
- CVE-2026-97888: Apache The embedded HTTP server does not clear the security identity established during a request before its worker thread handles the next request
- CVE email alerts for Apache
Status is calculated from the published milestones. When a vendor does not publish a date, this page says so and does not estimate one.