Magento Version JSON API: free, no auth, CORS open

version string

The release identifier, e.g. "2.4.7-p5". Treat as opaque — do not sort lexically.

releaseDate date

ISO date the release was published. May be null for unreleased upcoming entries.

eolDate date

ISO date the release exits support. May be null.

statusLabel enum

pre-release · upcoming · supported (latest) · supported · eol · unknown.

isLatestVersion boolean

Only the latest release of a distribution has this true.

isSecureVersion boolean

Released and not past end of support. Lifecycle only: a release can be inside support and still have open security bulletins.

securitySummary object

List endpoints only. status (vulnerable · secure · eol · unknown) and requiredPatches (Adobe isolated patches for this exact release, all needed, oldest first) and upgradeRequired; all null when the distribution has no bulletin coverage. Remedies: /versions/{version}/security.

isFutureVersion boolean

releaseDate is in the future, or the version is an alpha, beta or RC pre-release.

isEOLVersion boolean

eolDate is past.

systemRequirements object

Sparse map of stack components. Absent keys mean “not declared,” not “incompatible.”

{
  "data": {
    "2.4.9": {
      "version": "2.4.9",
      "releaseDate": "2026-05-12",
      "eolDate": "2029-05-31",
      "isEOLVersion": false,
      "isSecureVersion": true,
      "isLatestVersion": true,
      "isFutureVersion": false,
      "statusLabel": "supported (latest)",
      "securitySummary": { "status": "vulnerable", "requiredPatches": 4, "upgradeRequired": false },
      "systemRequirements": {
        "php": ["8.5"],
        "composer": ["2.10"],
        "mysql": ["8.4"],
        "mariadb": ["11.8", "12.3"],
        "opensearch": ["3"],
        "valkey": ["9"],
        "rabbitmq": ["4.3"],
        "varnish": ["8"],
        "nginx": ["1.30"]
      }
    }
  },
  "_documentation": "https://magento.watch/api",
  "_description": "Latest stable release"
}

{
  "data": {
    "distribution": "magento-community",
    "version": "2.4.7",
    "status": "vulnerable",
    "vulnerableTo": [
      {
        "id": "APSB25-88",
        "severity": "critical",
        "publishedDate": "2025-09-09",
        "cves": ["CVE-2025-54236"],
        "fixedIn": "2.4.7-p7",
        "isolatedPatches": []
      },
      {
        "id": "APSB25-71",
        "severity": "critical",
        "publishedDate": "2025-08-12",
        "cves": ["CVE-2025-49557"],
        "fixedIn": "2.4.7-p7",
        "isolatedPatches": []
      }
      // … 6 more, newest first
    ],
    "fixedBy": [
      {
        "id": "APSB24-18",
        "severity": "critical",
        "publishedDate": "2024-04-09",
        "cves": ["CVE-2024-20758", "CVE-2024-20759"],
        "fixedIn": "2.4.7"
      }
    ],
    "recommendedVersion": "2.4.7-p10"
  },
  "_documentation": "https://magento.watch/api",
  "_description": "Security status for 2.4.7"
}

• Latest version: curl -s https://magento.watch/api/v1/magento-community/versions/latest | jq '.data | keys[0]'
• All supported PHP versions: curl -s https://magento.watch/api/v1/magento-community/versions/supported | jq '[.data[].systemRequirements.php] | add | unique'
• EOL date for a specific release: curl -s https://magento.watch/api/v1/magento-community/versions/2.4.7-p5 | jq '.eolDate'

Responses ship Cache-Control: public, max-age=3600, s-maxage=86400, stale-while-revalidate=86400. There is no rate limit at the application layer; please cache locally for high-volume polling. CORS is open (Access-Control-Allow-Origin: *).