Supported products

123 products, each a compiled-in probe (see Concepts). Use the value in Product as product: in a target. Resolver is the lifecycle-data identifier — endoflife:<slug> for endoflife.date (real EOL/support dates), github:<owner/repo> for GitHub Releases (latest version only, no eol/support/lts — GitHub has no opinion on lifecycle policy), or github-tags:<owner/repo> for a repo with no Releases at all, only git tags (same “latest version only” limitation as github:, used when a product’s own tags aren’t even a plain dotted version — see pgAdmin), or github-tag-branches:<owner/repo> for a project that maintains several release branches at once (one lifecycle cycle per major.minor, each with its own latest tag — see FreeRADIUS) — and a — means enodia has version detection for that product but no lifecycle match yet (its patch/branch axes still work; its lifecycle axis stays unknown). Click a product for its exact endpoint, auth requirements, and recorded fields.

Both GitHub-backed resolver types are unauthenticated by default (capped at 60 requests/hour, shared with anything else on the same source IP) — set the GITHUB_TOKEN environment variable (the same convention gh, goreleaser, and GitHub Actions itself use) to raise that to 5000/hour; empty or unset just falls back to the unauthenticated cap, nothing breaks either way.

Since 2.2, the GitHub resolvers also read release tags the way projects actually spell them: a leading <repo>-/<repo>_ is dropped (weblate-2026.10 reads as 2026.10), underscore-spelled (Release_1_18_0) and release--prefixed (release-5.2.4) tags parse as versions, and a tag that names a pre-release (5.3.0.M2, 2026.10.0b7, -rc1, -beta.1) is skipped even when GitHub doesn’t flag it as one.

CVE lists which databases the product is matched against when a cve: block is configured — NVD, BDU (БДУ ФСТЭК), or — for no CVE lookup; MariaDB data, Atlassian data, PostgreSQL data and nginx data add that vendor’s own security data (see Vendors’ own data). Ten Linux distributions are matched per installed package instead of by release — (packages) names the source: the Debian Security Tracker, the vendor’s OVAL, or Alpine’s secdb (see Package-level CVEs) (each unmatched case has its reason on the CVE correlation page). This column comes from enodia’s own product tables, not from enodia products.

This table is generated from enodia products against the currently built binary — re-run it to check for drift before treating this page as gospel if it’s been a while. sonarqube’s row shows its static fallback (endoflife:sonarqube-server, what enodia products prints with nothing yet probed) — a real observation picks between that and endoflife:sonarqube-community per instance, from the version string itself; see its own page.

Applications and infrastructure services

92 products, probed over HTTP(S) or a raw wire protocol (MySQL, Redis, MongoDB, Cassandra, …). Five are exceptions: p4d and p4p speak no wire protocol enodia implements at all — both shell out to the operator’s own p4 CLI, which needs to be installed alongside enodia itself, not just reachable over the network — and freeradius, kafka and minio are read over SSH, from the server’s own binary or jar — RADIUS has no way to report a version, Kafka’s is only in JMX, and MinIO’s only behind an admin key.

Product	Summary	Resolver	CVE
`apache`	Apache HTTP Server	`endoflife:apache-http-server`	NVD, BDU
`artifactory`	JFrog Artifactory	`endoflife:artifactory`	NVD, BDU
`bamboo`	Atlassian Bamboo (Data Center)	`endoflife:bamboo`	NVD, BDU, Atlassian data
`bitbucket`	Atlassian Bitbucket (Data Center)	`endoflife:bitbucket`	NVD, BDU, Atlassian data
`bitwarden`	Bitwarden (self-hosted)	`github:bitwarden/server`	NVD
`cassandra`	Apache Cassandra (CQL native protocol)	`endoflife:apache-cassandra`	NVD, BDU
`clickhouse`	ClickHouse	`endoflife:clickhouse`	NVD, BDU
`code-server`	code-server (VS Code in the browser)	`github:coder/code-server`	NVD
`confluence`	Atlassian Confluence (Data Center)	`endoflife:confluence`	NVD, BDU, Atlassian data
`dell-idrac`	Dell iDRAC	—	NVD, BDU
`domainmod`	DomainMOD	`github:domainmod/domainmod`	NVD
`doxygen`	Doxygen-generated documentation site	`github:doxygen/doxygen`	NVD
`elasticsearch`	Elasticsearch	`endoflife:elasticsearch`	NVD, BDU
`esxi`	VMware ESXi	`endoflife:esxi`	—
`euro-office`	Euro-Office Docs (ONLYOFFICE fork)	`github:Euro-Office/DocumentServer`	—
`forgejo`	Forgejo	`endoflife:forgejo`	NVD, BDU
`fortios`	Fortinet FortiOS (FortiGate)	`endoflife:fortios`	NVD, BDU
`freeradius`	FreeRADIUS	`github-tag-branches:FreeRADIUS/freeradius-server`	NVD, BDU
`generic`	Hand-written parser for systems enodia doesn’t know — see Configuration	—	—
`ghost`	Ghost	`github:TryGhost/Ghost`	NVD, BDU
`gitlab`	GitLab	`endoflife:gitlab`	NVD, BDU
`grafana`	Grafana	`endoflife:grafana`	NVD, BDU
`graylog`	Graylog	`endoflife:graylog`	NVD, BDU
`greenbone`	Greenbone / OpenVAS (gsad web daemon)	`github:greenbone/gsad`	NVD
`haproxy`	HAProxy	`endoflife:haproxy`	NVD, BDU
`harbor`	Harbor (container registry)	`endoflife:harbor`	NVD, BDU
`home-assistant`	Home Assistant (REST API, long-lived token)	`github:home-assistant/core`	NVD
`hp-ilo4`	HP iLO 4	—	NVD, BDU
`jaeger`	Jaeger	`endoflife:jaeger`	NVD
`jellyfin`	Jellyfin	`github:jellyfin/jellyfin`	NVD
`jenkins`	Jenkins	`endoflife:jenkins`	NVD, BDU
`jira`	Atlassian Jira (Data Center)	`endoflife:jira-software`	NVD, BDU, Atlassian data
`kafka`	Apache Kafka broker (over SSH)	`endoflife:apache-kafka`	NVD, BDU
`keycloak`	Keycloak	`endoflife:keycloak`	NVD, BDU
`kibana`	Kibana	`endoflife:kibana`	NVD, BDU
`kitsu`	Kitsu (CG-Wire / Zou frontend)	`github:cgwire/kitsu`	—
`libretranslate`	LibreTranslate	`github:LibreTranslate/LibreTranslate`	—
`logstash`	Logstash	`endoflife:logstash`	NVD, BDU
`mariadb`	MariaDB Server	`endoflife:mariadb`	NVD, BDU, MariaDB data
`mattermost`	Mattermost	`endoflife:mattermost`	NVD, BDU
`memcached`	memcached	`endoflife:memcached`	NVD, BDU
`minio`	MinIO (server binary, over SSH)	`github:minio/minio`	NVD, BDU
`mongodb`	MongoDB	`endoflife:mongodb`	NVD, BDU
`mysql`	MySQL Server	`endoflife:mysql`	NVD, BDU
`netbox`	NetBox	`github:netbox-community/netbox`	NVD
`netdata`	Netdata agent	`github:netdata/netdata`	NVD, BDU
`nextcloud`	Nextcloud	`endoflife:nextcloud`	NVD, BDU
`nexus`	Sonatype Nexus Repository	`endoflife:nexus`	NVD, BDU
`nginx`	nginx	`endoflife:nginx`	NVD, BDU, nginx data
`oauth2-proxy`	oauth2-proxy	`github:oauth2-proxy/oauth2-proxy`	NVD, BDU
`onlyoffice`	ONLYOFFICE Docs (Document Server)	`github:ONLYOFFICE/DocumentServer`	NVD, BDU
`openhab`	openHAB	`github:openhab/openhab-distro`	NVD
`opensearch`	OpenSearch	`endoflife:opensearch`	NVD, BDU
`owncast`	Owncast	`github:owncast/owncast`	NVD
`p4d`	Perforce Helix Core Server (p4d)	—	NVD, BDU
`p4p`	Perforce Proxy (p4p)	—	—
`perforce-swarm`	Perforce Helix Swarm	—	—
`pgadmin`	pgAdmin	`github-tags:pgadmin-org/pgadmin4`	NVD, BDU
`phpipam`	phpIPAM	`github:phpipam/phpipam`	NVD, BDU
`phpmyadmin`	phpMyAdmin	`endoflife:phpmyadmin`	NVD, BDU
`portainer`	Portainer	`github:portainer/portainer`	NVD, BDU
`postgres_exporter`	prometheus-community/postgres_exporter	`github:prometheus-community/postgres_exporter`	—
`postgresql`	PostgreSQL	`endoflife:postgresql`	NVD, BDU, PostgreSQL data
`posthog`	PostHog (self-hosted; version is the git commit)	—	—
`proftpd`	ProFTPD	`endoflife:proftpd`	NVD, BDU
`proxmox`	Proxmox VE	`endoflife:proxmox-ve`	NVD, BDU
`qbittorrent`	qBittorrent (Web UI API)	`github:qbittorrent/qBittorrent`	NVD, BDU
`rabbitmq`	RabbitMQ (management plugin API)	`endoflife:rabbitmq`	NVD, BDU
`redis`	Redis	`endoflife:redis`	NVD, BDU
`routeros`	MikroTik RouterOS	`endoflife:routeros`	NVD, BDU
`sentry`	Sentry (self-hosted)	`github:getsentry/self-hosted`	NVD
`sonarqube`	SonarQube (Server or Community Build)	`endoflife:sonarqube-server`*	NVD, BDU
`splunk`	Splunk Enterprise (splunkd management API)	`endoflife:splunk`	NVD, BDU
`ssh`	SSH banner (any implementation)	—	NVD, BDU
`supermicro-bmc`	Supermicro BMC	—	—
`synology-dsm`	Synology DSM	—	NVD, BDU
`teamcity`	JetBrains TeamCity	—	NVD, BDU
`testrail`	TestRail	—	NVD
`torrserver`	TorrServer	`github:YouROK/TorrServer`	—
`traefik`	Traefik	`endoflife:traefik`	NVD, BDU
`truenas`	TrueNAS	`endoflife:truenas`	—
`uptime-kuma`	Uptime Kuma (socket.io login)	`github:louislam/uptime-kuma`	NVD
`vault`	HashiCorp Vault	`endoflife:hashicorp-vault`	NVD, BDU
`vaultwarden`	Vaultwarden	`github:dani-garcia/vaultwarden`	NVD, BDU
`vcenter`	VMware vCenter Server	`endoflife:vcenter`	—
`wapt`	WAPT server (Tranquil IT)	—	NVD
`weblate`	Weblate	`github:WeblateOrg/weblate`	NVD
`wordpress`	WordPress	`endoflife:wordpress`	NVD, BDU
`youtrack`	YouTrack	`endoflife:youtrack`	NVD, BDU
`zabbix`	Zabbix	`endoflife:zabbix`	NVD, BDU
`zookeeper`	Apache ZooKeeper	`endoflife:zookeeper`	NVD, BDU
`zou`	Zou (CG-Wire API backend)	—	—

Operating systems

31 products, all identified over SSH rather than HTTP — see SSH-based OS identification for the shared mechanism every one of these uses.

Product	Summary	Resolver	CVE
`almalinux`	AlmaLinux	`endoflife:almalinux`	OVAL (packages)
`alpine-linux`	Alpine Linux	`endoflife:alpine-linux`	Alpine secdb (packages)
`amazon-linux`	Amazon Linux	`endoflife:amazon-linux`	—
`astra-linux`	Astra Linux	—	OVAL (packages)
`centos`	CentOS Linux (legacy, EOL)	`endoflife:centos`	—
`centos-stream`	CentOS Stream	`endoflife:centos-stream`	—
`debian`	Debian	`endoflife:debian`	Debian tracker (packages)
`eurolinux`	EuroLinux	`endoflife:eurolinux`	—
`fedora`	Fedora Linux	`endoflife:fedora`	—
`freebsd`	FreeBSD	`endoflife:freebsd`	—
`gentoo`	Gentoo Linux	—	—
`kali-linux`	Kali Linux	—	—
`linuxmint`	Linux Mint	`endoflife:linuxmint`	OVAL (packages)
`macos`	macOS	`endoflife:macos`	NVD, BDU
`netbsd`	NetBSD	`endoflife:netbsd`	—
`nixos`	NixOS	`endoflife:nixos`	—
`openbsd`	OpenBSD	`endoflife:openbsd`	—
`openeuler`	openEuler	—	—
`opensuse`	openSUSE	`endoflife:opensuse`	—
`opnsense`	OPNsense	`endoflife:opnsense`	NVD, BDU
`oracle-linux`	Oracle Linux	`endoflife:oracle-linux`	OVAL (packages)
`oracle-solaris`	Oracle Solaris	`endoflife:oracle-solaris`	—
`pfsense`	pfSense Community Edition	—	NVD, BDU
`photon`	VMware Photon OS	`endoflife:photon`	—
`postmarketos`	postmarketOS	`endoflife:postmarketos`	—
`redos`	RED OS	—	OVAL (packages)
`rhel`	Red Hat Enterprise Linux	`endoflife:rhel`	OVAL (packages)
`rocky-linux`	Rocky Linux	`endoflife:rocky-linux`	OVAL (packages)
`slackware`	Slackware	`endoflife:slackware`	—
`steamos`	SteamOS	`endoflife:steamos`	—
`ubuntu`	Ubuntu	`endoflife:ubuntu`	OVAL (packages)

Atlassian products

Jira, Confluence, Bitbucket, and Bamboo share one manifest endpoint convention. product: is declared explicitly in your config rather than guessed from the response — pointing a Confluence URL at a Jira entry is a real typo that deserves to be caught, not silently recorded as a wrong fact. Bitbucket’s own manifest still reports itself as stash (its former name) — that’s the vendor’s response, not an enodia quirk.

`zou` and `kitsu` — one probe, two products

Both point at the same Zou API backend and answer the same request — they’re registered separately because they need different lifecycle resolvers (Zou’s own GitHub repo publishes no usable Releases). See Zou and Kitsu for the full explanation.

Don’t see your product?

Use product: generic as an escape hatch for anything without a dedicated probe, or open an issue on GitHub — the .github/ISSUE_TEMPLATE/new_product.yml template asks for exactly what a new probe needs.