# Bootstrap, release history and use on real websites.

A CSS framework with a ready-made grid system, components, and utilities. Originally created at Twitter, now an independent open-source project. Suitable for rapid prototyping and responsive websites.

- **Status:** Stable. Bootstrap 5 is stable and maintained, with no jQuery dependency.
- **Category:** [JS/CSS Frameworks](https://be1st.ai/technologies/framework)
- **First release:** 2011
- **License:** MIT
- **Latest version:** 5.3.8 (26 Aug 2025)
- **Official website:** https://getbootstrap.com
- **Documentation:** https://getbootstrap.com/docs/
- **GitHub:** https://github.com/twbs/bootstrap
- **Page:** https://be1st.ai/technologies/framework/bootstrap

## Bootstrap on audited websites

2,198 of the 16,845 websites audited by be1st run Bootstrap (13%). That ranks it #5 of the 35 technologies in JS/CSS Frameworks we have seen in audits.

### Websites running Bootstrap vs all websites

- **Web score:** 69 (all websites 72)
- **SEO:** 77 (all websites 79)
- **Security:** 56 (all websites 59)
- **Performance:** 63 (all websites 72)
- **AI Readiness:** 30 (all websites 31)

### Most used in JS/CSS Frameworks

1. [Tailwind CSS](https://be1st.ai/technologies/framework/tailwind-css): 34% (5,653)
2. [jQuery](https://be1st.ai/technologies/framework/jquery): 29% (4,883)
3. [Next.js](https://be1st.ai/technologies/framework/next-js): 23% (3,836)
4. [React](https://be1st.ai/technologies/framework/react): 22% (3,626)
5. [Bootstrap](https://be1st.ai/technologies/framework/bootstrap): 13% (2,198)
6. [PHP](https://be1st.ai/technologies/framework/php): 3.0% (502)
7. [Lit](https://be1st.ai/technologies/framework/lit): 2.9% (487)
8. [Astro](https://be1st.ai/technologies/framework/astro): 2.4% (405)
9. [Vue.js](https://be1st.ai/technologies/framework/vue-js): 2.2% (373)
10. [Alpine.js](https://be1st.ai/technologies/framework/alpine-js): 2.0% (341)

The number for React counts only websites where Tech Stack detects it directly, not websites built with Next.js, Gatsby, and Remix, which run it too. The number for Vue.js counts only websites where Tech Stack detects it directly, not websites built with Nuxt, which run it too.

## Bootstrap versions found in audits

Tech Stack has found 101 different Bootstrap versions in audits so far. A version stays on this list even after the website that ran it has updated. Our daily version check compares each one with the official release data and with OSV.dev.

- 7 on the latest version
- 20 outdated
- 20 on an end-of-life major version
- 47 with known vulnerabilities
- 7 pre-releases

58 of these versions are on a release line that no longer gets fixes, 37 of them with known vulnerabilities.

| Version | Status | Known vulnerabilities | Update to |
| --- | --- | --- | --- |
| 5.27.1 | Latest | 0 | - |
| 5.8.19 | Latest | 0 | - |
| 5.8.18 | Latest | 0 | - |
| 5.8.1 | Latest | 0 | - |
| 5.7.21 | Latest | 0 | - |
| 5.4.25 | Latest | 0 | - |
| 5.3.8 | Latest | 0 | - |
| 5.3.7 | Outdated | 0 | 5.3.8 |
| 5.3.6 | Outdated | 0 | 5.3.8 |
| 5.3.5 | Outdated | 0 | 5.3.8 |
| 5.3.3 | Outdated | 0 | 5.3.8 |
| 5.3.2 | Outdated | 0 | 5.3.8 |
| 5.3.1 | Outdated | 0 | 5.3.8 |
| 5.3.0 | Outdated | 0 | 5.3.8 |
| 5.2.21 | Outdated | 0 | 5.3.8 |
| 5.2.3 | Outdated | 0 | 5.3.8 |
| 5.2.2 | Outdated | 0 | 5.3.8 |
| 5.2.1 | Outdated | 0 | 5.3.8 |
| 5.2.0 | Outdated | 0 | 5.3.8 |
| 5.1.3 | Outdated | 0 | 5.3.8 |
| 5.1.2 | Outdated | 0 | 5.3.8 |
| 5.1.1 | Outdated | 0 | 5.3.8 |
| 5.1.0 | Outdated | 0 | 5.3.8 |
| 5.0.31 | Outdated | 0 | 5.3.8 |
| 5.0.2 | Outdated | 0 | 5.3.8 |
| 5.0.1 | Outdated | 0 | 5.3.8 |
| 5.0.0 | Outdated | 0 | 5.3.8 |
| 4.13.0 | End of life | 0 | 5.3.8 |
| 4.9.35 | End of life | 0 | 5.3.8 |
| 4.9.26 | End of life | 0 | 5.3.8 |
| 4.7.0 | End of life | 0 | 5.3.8 |
| 4.6.30 | End of life | 0 | 5.3.8 |
| 4.6.29 | End of life | 0 | 5.3.8 |
| 4.6.3 | End of life | 0 | 5.3.8 |
| 4.6.2 | End of life | 0 | 5.3.8 |
| 4.6.1 | End of life | 0 | 5.3.8 |
| 4.6.0 | End of life | 0 | 5.3.8 |
| 4.5.3 | End of life | 0 | 5.3.8 |
| 4.5.2 | End of life | 0 | 5.3.8 |
| 4.5.1 | End of life | 0 | 5.3.8 |
| 4.5.0 | End of life | 0 | 5.3.8 |
| 4.4.1 | End of life | 0 | 5.3.8 |
| 4.4.0 | End of life | 0 | 5.3.8 |
| 4.3.8 | End of life | 0 | 5.3.8 |
| 4.3.1 | End of life | 0 | 5.3.8 |
| 3.7.0 | End of life | 0 | 5.3.8 |
| 3.5.1 | End of life | 0 | 5.3.8 |
| 4.3.0 | Vulnerable (release line without fixes) | 1 vulnerability, highest moderate (GHSA-9v3m-8fp8-mj99) | 5.3.8 |
| 4.2.1 | Vulnerable (release line without fixes) | 1 vulnerability, highest moderate (GHSA-9v3m-8fp8-mj99) | 5.3.8 |
| 4.2.0 | Vulnerable (release line without fixes) | 1 vulnerability, highest moderate (GHSA-9v3m-8fp8-mj99) | 5.3.8 |
| 4.1.6 | Vulnerable (release line without fixes) | 1 vulnerability, highest moderate (GHSA-9v3m-8fp8-mj99) | 5.3.8 |
| 4.1.3 | Vulnerable (release line without fixes) | 1 vulnerability, highest moderate (GHSA-9v3m-8fp8-mj99) | 5.3.8 |
| 4.1.2 | Vulnerable (release line without fixes) | 1 vulnerability, highest moderate (GHSA-9v3m-8fp8-mj99) | 5.3.8 |
| 4.1.1 | Vulnerable (release line without fixes) | 4 vulnerabilities, highest moderate (GHSA-3wqf-4x89-9g79, GHSA-7mvr-5x2g-wfc8, GHSA-9v3m-8fp8-mj99, ...) | 5.3.8 |
| 4.1.0 | Vulnerable (release line without fixes) | 4 vulnerabilities, highest moderate (GHSA-3wqf-4x89-9g79, GHSA-7mvr-5x2g-wfc8, GHSA-9v3m-8fp8-mj99, ...) | 5.3.8 |
| 4.0.10 | Vulnerable (release line without fixes) | 4 vulnerabilities, highest moderate (GHSA-3wqf-4x89-9g79, GHSA-7mvr-5x2g-wfc8, GHSA-9v3m-8fp8-mj99, ...) | 5.3.8 |
| 4.0.0 | Vulnerable (release line without fixes) | 4 vulnerabilities, highest moderate (GHSA-3wqf-4x89-9g79, GHSA-7mvr-5x2g-wfc8, GHSA-9v3m-8fp8-mj99, ...) | 5.3.8 |
| 3.4.1 | Vulnerable (release line without fixes) | 2 vulnerabilities, highest moderate (GHSA-q58r-hwc8-rm9j, GHSA-vxmc-5x29-h64v) | 5.3.8 |
| 3.4.0 | Vulnerable (release line without fixes) | 2 vulnerabilities, highest moderate (GHSA-9v3m-8fp8-mj99, GHSA-vxmc-5x29-h64v) | 5.3.8 |
| 3.3.7 | Vulnerable (release line without fixes) | 7 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 3.3.6 | Vulnerable (release line without fixes) | 7 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 3.3.5 | Vulnerable (release line without fixes) | 7 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 3.3.4 | Vulnerable (release line without fixes) | 7 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 3.3.2 | Vulnerable (release line without fixes) | 7 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 3.3.1 | Vulnerable (release line without fixes) | 7 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 3.2.0 | Vulnerable (release line without fixes) | 7 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 3.1.1 | Vulnerable (release line without fixes) | 7 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 3.1.0 | Vulnerable (release line without fixes) | 7 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 3.0.3 | Vulnerable (release line without fixes) | 7 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 3.0.2 | Vulnerable (release line without fixes) | 7 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 3.0.1 | Vulnerable (release line without fixes) | 7 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 3.0.0 | Vulnerable (release line without fixes) | 7 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 2.7.3 | Vulnerable (release line without fixes) | 6 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 2.6.2 | Vulnerable (release line without fixes) | 6 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 2.5.2 | Vulnerable (release line without fixes) | 6 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 2.3.15 | Vulnerable (release line without fixes) | 6 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 2.3.4 | Vulnerable (release line without fixes) | 6 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 2.3.2 | Vulnerable (release line without fixes) | 6 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 2.3.1 | Vulnerable (release line without fixes) | 6 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 2.3.0 | Vulnerable (release line without fixes) | 6 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-3wqf-4x89-9g79, GHSA-4p24-vmcr-4gqj, ...) | 5.3.8 |
| 2.2.2 | Vulnerable (release line without fixes) | 4 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-4p24-vmcr-4gqj, GHSA-ph58-4vrj-w6hr, ...) | 5.3.8 |
| 2.2.0 | Vulnerable (release line without fixes) | 4 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-4p24-vmcr-4gqj, GHSA-ph58-4vrj-w6hr, ...) | 5.3.8 |
| 2.0.1 | Vulnerable (release line without fixes) | 3 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-ph58-4vrj-w6hr, GHSA-vxmc-5x29-h64v) | 5.3.8 |
| 1.11.3 | Vulnerable | 3 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-ph58-4vrj-w6hr, GHSA-vxmc-5x29-h64v) | 5.3.8 |
| 1.9.0 | Vulnerable | 3 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-ph58-4vrj-w6hr, GHSA-vxmc-5x29-h64v) | 5.3.8 |
| 1.7.20 | Vulnerable | 3 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-ph58-4vrj-w6hr, GHSA-vxmc-5x29-h64v) | 5.3.8 |
| 1.5.1 | Vulnerable | 3 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-ph58-4vrj-w6hr, GHSA-vxmc-5x29-h64v) | 5.3.8 |
| 1.4.84 | Vulnerable | 3 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-ph58-4vrj-w6hr, GHSA-vxmc-5x29-h64v) | 5.3.8 |
| 1.3.1 | Vulnerable | 2 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-ph58-4vrj-w6hr) | 5.3.8 |
| 1.2.0 | Vulnerable | 2 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-ph58-4vrj-w6hr) | 5.3.8 |
| 1.0.2 | Vulnerable | 2 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-ph58-4vrj-w6hr) | 5.3.8 |
| 1.0.0 | Vulnerable | 2 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-ph58-4vrj-w6hr) | 5.3.8 |
| 0.2.59 | Vulnerable | 2 vulnerabilities, highest moderate (GHSA-3mgp-fx93-9xv5, GHSA-ph58-4vrj-w6hr) | 5.3.8 |
| 4.0.0-beta | Vulnerable (release line without fixes) | 1 vulnerability, highest moderate (GHSA-4p24-vmcr-4gqj) | 5.3.8 |
| 5.3.0-alpha1 | Pre-release | 0 | - |
| 5.3.0-alpha2 | Pre-release | 0 | - |
| 5.2.0-beta1 | Pre-release | 0 | - |
| 5.0.0-beta1 | Pre-release | 0 | - |
| 5.0.0-beta2 | Pre-release | 0 | - |
| 5.0.0-beta3 | Pre-release | 0 | - |
| 4.0.0-beta.2 | Pre-release (release line without fixes) | 0 | - |

Vulnerabilities from OSV.dev, checked 8 Nov 2026.

## Bootstrap versions and release history

4 release lines since 2012, as listed by endoflife.date and the npm registry. The latest version is 5.3.8, released 26 Aug 2025. Supported according to endoflife.date: 5.

| Version | Released | Latest release | Support | Releases |
| --- | --- | --- | --- | --- |
| 5 (LTS) | 5 May 2021 | 5.3.8 (25 Aug 2025) | Supported | 20 |
| 4 (LTS) | 18 Jan 2018 | 4.6.2 (19 Jul 2022) | End of life, since 1 Jan 2023; paid extended support available | 17 |
| 3 (LTS) | 19 Aug 2013 | 3.4.1 (13 Feb 2019) | End of life, since 24 Jul 2019; paid extended support available | 11 |
| 2 | 31 Jan 2012 | 2.3.2 (26 Jul 2013) | End of life, since 19 Aug 2013; paid extended support available | - |

Sources: [endoflife.date](https://endoflife.date/bootstrap), [npm registry, package bootstrap](https://www.npmjs.com/package/bootstrap), checked 8 Nov 2026.

## Other technologies in JS/CSS Frameworks

- [TanStack Start](https://be1st.ai/technologies/framework/tanstack-start): 1.9% of websites
- [Nette](https://be1st.ai/technologies/framework/nette): 1.8% of websites
- [Nuxt](https://be1st.ai/technologies/framework/nuxt): 1.5% of websites
- [Angular](https://be1st.ai/technologies/framework/angular): 1.2% of websites
- [Preact](https://be1st.ai/technologies/framework/preact): 1.2% of websites
- [UnoCSS](https://be1st.ai/technologies/framework/unocss): 1.2% of websites
- [Express](https://be1st.ai/technologies/framework/express): 1.1% of websites
- [SvelteKit](https://be1st.ai/technologies/framework/sveltekit): 1.1% of websites
- [ASP.NET](https://be1st.ai/technologies/framework/asp-net): 1.0% of websites
- [Django](https://be1st.ai/technologies/framework/django): <1% of websites
- [HTMX](https://be1st.ai/technologies/framework/htmx): <1% of websites
- [Turbo (Hotwire)](https://be1st.ai/technologies/framework/turbo): <1% of websites

[All 38 in JS/CSS Frameworks](https://be1st.ai/technologies/framework)

## Questions about Bootstrap

### What is Bootstrap?

A CSS framework with a ready-made grid system, components, and utilities. Originally created at Twitter, now an independent open-source project. Suitable for rapid prototyping and responsive websites. The be1st catalog lists Bootstrap under JS/CSS Frameworks. License of Bootstrap: MIT.

### What is the latest version of Bootstrap?

The latest version of Bootstrap is 5.3.8, released 26 Aug 2025 (source: npm registry, package bootstrap).

### Which Bootstrap versions are still supported?

According to endoflife.date, these Bootstrap release lines are supported: 5.

### How many websites use Bootstrap?

2,198 of the 16,845 websites audited by be1st run Bootstrap (13%), as of 8 Nov 2026.

### When was Bootstrap first released?

Bootstrap was first released in 2011; the oldest version listed by endoflife.date and the npm registry dates from 2012.

### Is Bootstrap still a modern choice?

Bootstrap is a stable, mature choice rather than a new one. Bootstrap 5 is stable and maintained, with no jQuery dependency.

### What are the alternatives to Bootstrap?

Technologies that do the same job as Bootstrap include Tailwind CSS, Bulma, Semantic UI, Foundation, and Materialize.

Numbers: latest audit of each of 16,845 websites audited by be1st, as of 8 Nov 2026.