>>> [!note] Migrated issue <!-- Drupal.org comment --> <!-- Migrated from issue #3550290. --> Reported by: [bendev](https://www.drupal.org/user/572224) >>> <p><strong>Problem/Goal:</strong><br> The current Drupal core releases page (drupal.org/project/drupal/releases) only uses "Secure" or "Insecure" tags. When a minor version (e.g., Drupal 11.0.x) reaches its end-of-life (EOL) but has no known public security vulnerabilities (i.e., the last patch release, 11.0.13, is marked "Secure"), site owners may mistakenly believe it is safe to remain on that version indefinitely, despite it being unsupported.</p> <p>Staying on an EOL version, even if marked "Secure," is less secure and goes against best practices for several reasons:</p> <p><strong>No Future Security Patches</strong>: If a new vulnerability is discovered, it will <strong>not</strong> be fixed in EOL branches.</p> <p><strong>Dependency Risk</strong>: EOL versions are locked to older dependencies which may contain unpatched security flaws.</p> <p><strong>Untracked Vulnerabilities</strong>: Some security fixes are released as public "bug fixes" without a formal Security Advisory (SA) and may not be backported to EOL versions.</p> <p><strong>Difficult Upgrades</strong>: Waiting for a critical security release to force an upgrade to a newer minor version can make the process more difficult.</p> <p>More over, the current messaging in the Drupal back-office (e.g., "strongly recommended") and the "Secure" tag on the releases page may not be strong enough to communicate the risk associated with EOL versions.</p> <p><strong>Proposed Solution:</strong><br> Add a distinct "Unsupported" tag or visual indicator to any Drupal core minor release that has reached its end-of-life on the releases page (drupal.org/project/drupal/releases).</p> <p>This would improve clarity and help users better understand when a version, despite having no known public vulnerabilities, should be immediately updated due to lack of support. This tag should be applied when a subsequent minor version (e.g., 11.1.0) is released.</p>