Node.js 24 End of Life
Support dates, the patch stream you lose at EOL, and upgrade guidance — rebuilt from live data.
Node.js 24 is actively supported. It reaches end of life on 30 Apr 2028.
Support timeline
Official dates from the Node.js release process.
| Milestone | Date | Status |
|---|---|---|
| Initial release | 6 May 2025 | — |
| End of life (scheduled) | 30 Apr 2028 | in 630 days |
| Active support ended | 20 Oct 2026 | security fixes only after this |
| Latest release | 24.19.0 · 3 Aug 2026 | current |
What you lose on 30 Apr 2028
Being supported means fixes keep shipping to this branch. Here is the stream that stops. Source: NVD.
Node.js CVEs published and patched, by year
17 published in the last 12 months · data refreshed 2026-08-09
At the last-12-month rate of 17 Node.js CVEs, running 24 for a year past 30 Apr 2028 means roughly that many vulnerabilities fixed upstream but never backported to your branch. Past branches bear this out: Node.js 25 has missed 10 since it went end of life.
How much runway a newer branch buys
Moving to Node.js 26 extends security support by about 365 days.
| Branch | End of life | Days left | vs 24 |
|---|---|---|---|
| Node.js 26 | 30 Apr 2029 | 995 | +365 days |
| Node.js 24 | 30 Apr 2028 | 630 | this branch |
| Node.js 22 | 30 Apr 2027 | 264 | -366 days |
Review the Node.js changelog before moving to Node.js 26. Run npx ls-engines to check package compatibility.
Frequently asked questions
When does Node.js 24 reach end of life?
Node.js 24 reaches end of life on 30 Apr 2028 — 630 days from now. After that date it receives no security fixes.
Is Node.js 24 still supported?
Yes. Node.js 24 is currently maintained. Latest release: 24.19.0, published 3 Aug 2026.
What happens when Node.js 24 reaches end of life?
Security fixes stop. Over the last 12 months 17 Node.js vulnerabilities were published and patched across supported branches; once 24 is end of life, fixes at that rate no longer reach it.
How long do I have to upgrade from Node.js 24?
630 days. Moving to Node.js 26 instead buys roughly 365 more days of security support.