# KeePass security updates

The latest version of KeePass is 2.60.0, released November 2, 2025. Patch Radar has 3 security fixes for KeePass, closing 3 CVEs. The newest is KeePass 2.54.0 (2.54.0), released June 3, 2023. 1 CVE has no fix yet.

- Web page: https://patchblox.com/security/product/windows-app/keepass
- Platform: Windows apps
- Vendor: Keepass
- Latest version: 2.60.0 (Nov 2, 2025)
- Supported: yes

## CVEs with no fix yet

| CVE | Priority | Title | Status |
|---|---|---|---|
| [CVE-2026-86776](https://patchblox.com/security/data/cve/CVE-2026-86776.md) | Routine | KeePass 2.35 through 2.61.1 Memory Exhaustion via KDBX Header Field Size | no-fix |

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [KeePass 2.54.0](https://patchblox.com/security/data/fix/windows-app/dominikreichl.keepass-2.54.0.md) | Jun 3, 2023 | 2.54.0 | High | 1 | 0 |
| [KeePass 2.53.1](https://patchblox.com/security/data/fix/windows-app/dominikreichl.keepass-2.53.1.md) | Feb 8, 2023 | 2.53.1 | Routine | 1 | 0 |
| [KeePass 2.48.1](https://patchblox.com/security/data/fix/windows-app/dominikreichl.keepass-2.48.1.md) | May 10, 2021 | 2.48.1 | High | 1 | 0 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo