// Supported Runtimes
Every technology we patch, architect, and operate.
Filter by category, lifecycle stage, or your current vendor. Each technology page includes a version coverage matrix, tier comparison, install instructions, and compliance documentation.
Trusted globally by enterprises
Messaging & Streaming
Event Streaming
Application Frameworks
Data Platforms
PostgreSQL
11 – 16GemFire / Geode
9.x – 10.xRedis
—Apache ZooKeeper
—Apache Solr
—Apache NiFi
—Hazelcast
—Apache Ignite
—MongoDB
—Elasticsearch
—Apache HBase
—Apache Hadoop
—Apache Hive
—Apache Druid
—ClickHouse
—etcd
—Need support for a runtime not listed?
Tell us which technology you need patched. We'll assess the effort and let you know if we can cover it.
Request CoverageFrequently asked questions
Which versions of RabbitMQ are past community end-of-life?
RabbitMQ 3.8.x, 3.9.x, 3.10.x, 3.11.x, and 3.12.x have all reached community EOL — meaning no further security patches or CVE fixes are released by the RabbitMQ maintainers for those versions. RabbitMQ 3.13.x reached EOL in late 2024. OSSeva delivers backported CVE patches for 3.11 through 3.13.
Which PostgreSQL versions are no longer receiving community security patches?
PostgreSQL 9.6 through 13 have all reached community EOL. PostgreSQL 11 reached EOL November 2023, PostgreSQL 12 reached EOL November 2024, and PostgreSQL 13 reaches EOL November 2025. OSSeva provides extended security patching for PostgreSQL 11, 12, and 13 for teams that cannot immediately migrate to PG 14 or later.
Is Spring Framework 5.3.x still supported?
Spring Framework 5.3.x reached its community OSS EOL on December 31, 2024. Broadcom's commercial support for Spring 5.3.x is also no longer available under standard terms. OSSeva delivers backported CVE patches for Spring Framework 5.3.x and Spring Boot 2.7.x under our extended lifecycle support program.
Which versions of Apache Kafka are EOL?
Apache Kafka versions 2.x and 3.0 through 3.4 are past their community supported window, meaning no further patch releases. Kafka 3.5 and 3.6 have reached or are approaching EOL. OSSeva supports Kafka 2.8 through 3.5 with backported security patches and compliance documentation.
What happened to Redis licensing? Can I still use Redis for free?
In March 2024, Redis Ltd. moved Redis off BSD-3-Clause to a dual licence of RSALv2 and SSPLv1 — not, despite widespread reporting, the Business Source License, which is a different licence with a time-delayed conversion that RSALv2 does not have. From Redis 8, Redis added AGPLv3 as a third option, so current Redis is available under an OSI-approved licence again. Valkey, the Linux Foundation fork created eight days after the change, continues under BSD-3-Clause. Redis 7.2 and earlier remain BSD-licensed, and OSSeva maintains CVE-patched builds of 6.2.x and 7.0.x for teams staying on them.
Is Node.js 18 still receiving security patches?
Node.js 18 (LTS 'Hydrogen') reached its end-of-life date in April 2025 and no longer receives security releases from the Node.js project. OSSeva delivers CVE patches for Node.js 18 for enterprise teams that have not yet migrated to Node.js 20 or 22.
Is Apache Tomcat 8.5 still supported?
Apache Tomcat 8.5 reached its community EOL in March 2024. OSSeva provides extended security patching for Tomcat 8.5.x for teams running Java EE 7 workloads that cannot immediately migrate to Tomcat 9.0 or 10.1.
What .NET versions does OSSeva support?
.NET 6 reached Microsoft end-of-support in November 2024. .NET 7 reached EOL in May 2024. OSSeva delivers CVE patches for .NET 6 and .NET 7 for teams that have not yet migrated to .NET 8 (LTS, supported through November 2026).
Ready to get a supported runtime?
Start with a discovery call. We scope the work, confirm coverage, and have you patched within your first quarter.