Phones
- endoflife.date (© endoflife.date contributors, MIT license): release and end-of-support dates from a community project. Where it supplies the end-of-support date, the device page labels it as community data.
- The makers' own pages: Apple security releases; Google's Pixel support pages, Android build-number list and monthly Pixel update posts.
Routers and cameras
- The makers' own pages: end-of-life lists, support pages, firmware download pages, release notes and security advisories.
Vulnerabilities
- The makers' security bulletins: which update fixed which CVE, and for which models or versions.
- CISA Known Exploited Vulnerabilities catalog: vulnerabilities exploited in the wild (a US government work, public domain, CC0).
- NVD: severity scores (CVSS).
- CVE.org: the affected versions a maker reports.
- OSV: Android patch-level data.
- FIRST EPSS (Exploit Prediction Scoring System): the probability that a vulnerability will be exploited in the wild in the next 30 days, used only to order lists.
How we collect
- Facts only (model names, dates, versions), never the makers' own text on our pages.
- Public pages only, at most one request every 5 seconds per website (10 seconds on some); the NVD API with an API key, within NVD's published rate limit.
- No logins, and a bot check (a CAPTCHA or challenge page) stops the fetch.
Licenses and credits
- CVE records from cve.org, used under the CVE Terms of Use. Copyright © 1999–2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.
- Brand names are used descriptively; safeuntil is not affiliated with any vendor.
This product uses the NVD API but is not endorsed or certified by the NVD.