Screenshot of the Electron software end-of-life table. Of particular interest is that 23.0.0. is already EoL and 22.0.0 will go EoL on October 10, 2023.

Notices where this attachment appears

1. Embed this notice
   Tom Sellers (tomsellers@infosec.exchange)'s status on Tuesday, 26-Sep-2023 23:56:11 JST Tom Sellers

   in reply to

   In my earlier thread I should have recommended that folks be on the lookout for end of life(EoL) versions of Electron that are bundled with software that is itself updated to the latest version. I've observed a case where fully updated software was using Electron 22.x.x that isn't EoL yet, but will be in 2 weeks. In those cases I strongly suggest you notify your vendor and, if it is paid software, pressure them to migrate to a supported version ASAP.

   Note: There IS a patched version of 22.x.x which is 22.3.24.

   Reference: https://www.electronjs.org/docs/latest/tutorial/electron-timelines

   #Security #Electron #SBOM #CVE20234863 #CVE-2023-4863 #CVE_2023_4863