CompatHub
Check EOL

Electron 29 lifecycle

Current status

standard supportlow

Electron 29 is currently in standard support.

Security: 15 tracked advisories affecting this line. Details below — lifecycle and vulnerability status are separate.

Official lifecycle source: Electron npm releases

Support phase
standard support
End of life
Not officially published
Latest release
29.0.1
Released
21 Feb 2024

At a glance

Version line
29
Initial release
20 Feb 2024
Lifecycle phase
standard support
Latest stable
29.0.1
Latest release date
21 Feb 2024
EOL
Not officially published
Risk
low
Releases tracked
20

Lifecycle timeline

Phases from published LifecyclePeriod records. Missing phases are not inferred.

  1. Release

    20 Feb 2024

  2. standard supportcurrent

    20 Feb 2024 → —

    Source: Electron npm releases

Electron 29 is currently in standard support.

Upgrade options

Newer supported Electron version lines from CompatHub lifecycle data. Compatibility and security context use existing evidence only.

You are on Electron 29

Supported

Supported upgrade options

Open full upgrade planner for Electron 29 →

Security

Advisories affecting Electron 29 (OSV.dev evidence). Known exploited status, due dates, and ransomware use from CISA KEV when matched.

Known vulnerabilities
15
Known exploited
0
Highest CVSS
7.2
  • CVE-2026-70608GHSA-9f4c-93c8-jc8g

    Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path

    CVSS:
    7.2 (high) · NVD
    CWE:
    CWE-1021, CWE-693
    Affected:
    <39.8.10
    Fixed in:
    39.8.10
    Source:
    OSV source
  • CVE-2026-70609GHSA-4f78-qhmw-8j8m

    Electron: DevTools JavaScript Injection via Unsanitized Dock State Parameter

    CVSS:
    5.7 (moderate) · NVD
    CWE:
    CWE-116, CWE-94
    Affected:
    <39.8.7
    Fixed in:
    39.8.7
    Source:
    OSV source
  • CVE-2026-70612GHSA-p2rr-rvmm-c5fp

    Electron: Sandboxed iframes can launch external protocol handlers

    Affected:
    <39.8.8
    Fixed in:
    39.8.8
    Source:
    OSV source
  • CVE-2026-70611GHSA-f2r8-jv7c-xqmp

    Electron: DevTools embedder handler executes arbitrary files via shell open

    Affected:
    <39.8.9
    Fixed in:
    39.8.9
    Source:
    OSV source
  • CVE-2026-70610GHSA-ff2p-hmqr-hxm4

    Electron: contextBridge object copy honors prototype setters

    Affected:
    <39.8.9
    Fixed in:
    39.8.9
    Source:
    OSV source
  • CVE-2026-70607GHSA-v93f-fgjr-hjrj

    Electron: window.open features string controls some window options considered privileged

    Affected:
    <39.8.8
    Fixed in:
    39.8.8
    Source:
    OSV source
  • CVE-2026-70605GHSA-v64r-4m7r-3mvq

    Electron: HTTP redirect followed into local file loader

    Affected:
    <39.8.8
    Fixed in:
    39.8.8
    Source:
    OSV source
  • CVE-2026-70604GHSA-v3j7-r9gq-3gjw

    Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin reads

    Affected:
    <39.8.10
    Fixed in:
    39.8.10
    Source:
    OSV source
  • CVE-2026-70602GHSA-m55f-7gqj-fr98

    Electron: Extension tab APIs operate across session boundaries

    Affected:
    <39.8.8
    Fixed in:
    39.8.8
    Source:
    OSV source
  • CVE-2026-70603GHSA-5c9j-mhmv-5xgx

    Electron: shell.openPath path validation bypass via embedded null byte

    Affected:
    <39.8.6
    Fixed in:
    39.8.6
    Source:
    OSV source
  • CVE-2026-70601GHSA-h7rp-cf8h-j98x

    Electron: Context isolation bypass via Function.prototype.bind hijack

    Affected:
    <39.8.9
    Fixed in:
    39.8.9
    Source:
    OSV source
  • CVE-2026-70600GHSA-x8rc-wpg4-grpf

    Electron: Cross-origin iframe can position native autofill popup

    Affected:
    <39.8.8
    Fixed in:
    39.8.8
    Source:
    OSV source
  • CVE-2026-70599GHSA-9pf5-hg6p-4pwp

    Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin

    Affected:
    <39.8.7
    Fixed in:
    39.8.7
    Source:
    OSV source
  • CVE-2026-70598GHSA-pfmc-3mgc-p6fp

    Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size

    Affected:
    <39.8.10
    Fixed in:
    39.8.10
    Source:
    OSV source
  • CVE-2026-70597GHSA-jm7p-cc5g-qwxx

    Electron: Parent process code-sign check is spoofable

    Affected:
    <39.8.8
    Fixed in:
    39.8.8
    Source:
    OSV source

Latest release

29.0.1

Released 21 Feb 2024 · stable

https://registry.npmjs.org/electron/29.0.1

Previous releases

  • 29.1.0

    28 Feb 2024

  • 29.1.1

    8 Mar 2024

  • 29.0.0

    20 Feb 2024

Release history

20 concrete releases tracked for this line.

VersionRelease dateChannelSource
29.0.020 Feb 2024stableSource
29.0.121 Feb 2024stableSource
29.1.028 Feb 2024stableSource
29.1.18 Mar 2024stableSource
29.1.213 Mar 2024stableSource
29.1.313 Mar 2024stableSource
29.1.414 Mar 2024stableSource
29.1.520 Mar 2024stableSource
29.1.627 Mar 2024stableSource
29.2.04 Apr 2024stableSource
29.3.010 Apr 2024stableSource
29.3.118 Apr 2024stableSource
29.3.23 May 2024stableSource
29.3.39 May 2024stableSource
29.4.015 May 2024stableSource
29.4.122 May 2024stableSource
29.4.229 May 2024stableSource
29.4.327 Jun 2024stableSource
29.4.517 Jul 2024stableSource
29.4.617 Aug 2024stableSource

Release activity

Total releases
20
Last 30 days
0
Last 90 days
0
Avg. interval
~9 days
Most recent
21 Feb 2024

Should I use this version?

Suitable for new deployments

Electron 29 is currently supported (standard support).

Version comparison

Compact comparison against the nearest relevant release lines.

2944
Statusstandard supportstandard support
Latest release29.0.044.1.1
EOLNot publishedNot published
Risklowlow

Sources

Where this information comes from.

Lifecycle sources

Release sources

Data coverage

Last checked = last successful upstream check. Latest source update = when upstream content last changed.

Releases tracked
20
Lifecycle periods
1
EOL
Not officially published
Provenance records
2
Data last checked
2 Sept 2026
Latest source update
2 Sept 2026

EOL: Not officially published

Other Electron versions