Magento Open Source 2.4.7 was released on Apr 9, 2024. Its end of support is Apr 9, 2027. Its current support status is outdated — upgrade to 2.4.7-p10.

Release date: Apr 9, 2024
End of support: Apr 9, 2027
Status: outdated — upgrade to 2.4.7-p10
Distribution: Magento Open Source

2.4.7-p10 is the current release of the 2.4.7 line, published on May 12, 2026. Only the newest patch of a line counts as supported: upgrade 2.4.7 to 2.4.7-p10 to get every fix shipped since. Requirements below are the ones documented for 2.4.7 — for the stack to deploy today, see Magento Open Source 2.4.7-p10.

System requirements

Runtime

PHP 8.2, 8.3
Composer 2.9

Database

MySQL 8.0
MariaDB 10.6
AWS Aurora MySQL 8.0

Search

OpenSearch 2.12
Elasticsearch 7.17, 8.11
AWS OpenSearch 2.5
AWS Elasticsearch 7.9

Cache

Redis 7.2
Varnish 7.5
AWS ElastiCache redis-7

Queue

RabbitMQ 3.13
AWS MQ 3.9.13

Web server & storage

nginx 1.26
Apache 2.4
AWS S3 supported

Security vulnerable

APSB25-88 critical CVE-2025-54236 fixed in 2.4.7-p7
APSB25-71 critical CVE-2025-49557 fixed in 2.4.7-p7
APSB25-50 critical CVE-2025-47110 fixed in 2.4.7-p6
APSB25-26 critical CVE-2025-27189 fixed in 2.4.7-p5
APSB25-08 critical CVE-2025-24434 fixed in 2.4.7-p4
APSB24-73 critical CVE-2024-45115 fixed in 2.4.7-p3
APSB24-61 critical CVE-2024-39397 fixed in 2.4.7-p2
APSB24-40 critical CVE-2024-34102 fixed in 2.4.7-p1

Isolated patch: CVE-2024-34102 isolated patch

Recommended: 2.4.7-p10

Applicable security patches

APSB24-18 critical CVE-2024-20758, CVE-2024-20759 fixed in this release

Improper input validation (CVE-2024-20758) enabling arbitrary code execution by an authenticated administrator, plus stored cross-site scripting (CVE-2024-20759). Published with the 2.4.7 general availability release and the April 2024 patch set.

Quality patches

208 Adobe Quality Patches Tool patches apply to Magento Open Source 2.4.7. Browse and search them.

Previous and next releases

Previous 2.4.4-p7 Feb 13, 2024 Next 2.4.6-p5 Apr 9, 2024

JSON API

Get this release as JSON:

curl -s https://magento.watch/api/v1/magento-community/versions/2.4.7