This is an automated email from the ASF dual-hosted git repository.
lukaszlenart pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/struts-site.git
The following commit(s) were added to refs/heads/main by this push:
new 2bfdab78b docs: announce security bulletins S2-070 to S2-074 (#323)
2bfdab78b is described below
commit 2bfdab78b165016ae4b22469659de2833892501e
Author: Lukasz Lenart <[email protected]>
AuthorDate: Fri Aug 14 09:39:27 2026 +0200
docs: announce security bulletins S2-070 to S2-074 (#323)
* docs: announce security bulletins S2-070 to S2-074
Five bulletins were published on the cwiki on 14 August 2026, covering
CVE-2026-73631 through CVE-2026-73635. All five are fixed in 7.3.0, and
the three that also affect the 6.x line are fixed in 6.11.0.
Each CVE gets its own dated entry so it can be linked individually, in
the S2-068/S2-069 form. All five share a date, so every anchor carries
its bulletin number (a20260814-s2070 and onwards) rather than leaving
the first one to claim the bare date.
On the home page the security box now points at the whole batch rather
than a single bulletin, and S2-069 moves into the slot vacated by
S2-068, which is a year old.
Co-authored-by: Claude Opus 5 <[email protected]>
* docs: list S2-069 to S2-074 in the Prior Releases table
Adds the five bulletins published today to every affected row, and
backfills S2-069, which was announced on 11 January 2026 but never
reflected in the table.
Affected ranges are taken from the bulletins themselves:
- S2-070, S2-071: Struts 7.2.1 only
- S2-072: 2.1.8-2.3.37, 2.5.0-2.5.33, 6.0.0-6.10.0, 7.0.0-7.2.1
- S2-073: 6.0.0-6.10.0, 7.0.0-7.2.1 (no 2.5.x row is affected)
- S2-074: 2.0.0-2.3.37, 2.5.0-2.5.33, 6.0.0-6.10.0, 7.0.0-7.2.1
- S2-069: 2.0.0-2.3.37, 2.5.0-2.5.33, 6.0.0-6.1.0, so 6.1.1 and later
6.x rows stay untouched
The five rows that previously carried an empty Vulnerability cell
(7.2.1, 6.10.0, 7.1.1, 6.9.0, 6.8.0) are now populated. Column padding
is rewritten throughout because the widest cell grew.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 5 <[email protected]>
* docs: link every S2-070 to S2-074 announcement from the home page
The security box named five bulletins but pointed at a single
announcement anchor. Each bulletin now carries its own link, with a
short subject so the list says what each one covers.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 5 <[email protected]>
---------
Co-authored-by: Claude Opus 5 <[email protected]>
---
source/announce-2026.md | 64 +++++++++++++++++++++++++++++++++
source/index.html | 38 ++++++++++++++------
source/releases.md | 96 ++++++++++++++++++++++++-------------------------
3 files changed, 140 insertions(+), 58 deletions(-)
diff --git a/source/announce-2026.md b/source/announce-2026.md
index f86ec0b4b..3ef0558d0 100644
--- a/source/announce-2026.md
+++ b/source/announce-2026.md
@@ -13,6 +13,70 @@ title: Announcements 2026
Skip to: <a href="announce-2025">Announcements - 2025</a>
</p>
+#### 14 August 2026 - CVE-2026-73631: Shared parsing state in the JSON plugin
{#a20260814-s2070}
+
+The Apache Struts group recommends upgrading to Apache Struts version 7.3.0 to
mitigate potential security
+vulnerability when populating actions from a JSON request body with the
+[JSON plugin](https://struts.apache.org/plugins/json/). Only Struts 7.2.1 is
affected.
+
+> Please read the Security Bulletin
[S2-070](https://cwiki.apache.org/confluence/display/WW/S2-070) to find more
+> details about this security vulnerability
+
+**All developers are strongly advised to perform this upgrade.**
+
+You can download the latest version from our
[download](download.cgi#struts-ga) page.
+
+#### 14 August 2026 - CVE-2026-73632: Shared serialization state in the JSON
plugin {#a20260814-s2071}
+
+The Apache Struts group recommends upgrading to Apache Struts version 7.3.0 to
mitigate potential security
+vulnerability when using the SMD / JSON-RPC support of the
+[JSON plugin](https://struts.apache.org/plugins/json/). Only Struts 7.2.1 is
affected.
+
+> Please read the Security Bulletin
[S2-071](https://cwiki.apache.org/confluence/display/WW/S2-071) to find more
+> details about this security vulnerability
+
+**All developers are strongly advised to perform this upgrade.**
+
+You can download the latest version from our
[download](download.cgi#struts-ga) page.
+
+#### 14 August 2026 - CVE-2026-73633: Unbounded read of a JSON request body
{#a20260814-s2072}
+
+The Apache Struts group recommends upgrading to Apache Struts version 7.3.0 or
6.11.0 to mitigate potential security
+vulnerability when populating actions from a JSON request body with the
+[JSON plugin](https://struts.apache.org/plugins/json/).
+
+> Please read the Security Bulletin
[S2-072](https://cwiki.apache.org/confluence/display/WW/S2-072) to find more
+> details about this security vulnerability
+
+**All developers are strongly advised to perform this upgrade.**
+
+You can download the latest version from our
[download](download.cgi#struts-ga) page.
+
+#### 14 August 2026 - CVE-2026-73634: Unbounded read of a Content Security
Policy violation report {#a20260814-s2073}
+
+The Apache Struts group recommends upgrading to Apache Struts version 7.3.0 or
6.11.0 to mitigate potential security
+vulnerability in applications that expose an endpoint collecting Content
Security Policy violation reports.
+
+> Please read the Security Bulletin
[S2-073](https://cwiki.apache.org/confluence/display/WW/S2-073) to find more
+> details about this security vulnerability
+
+**All developers are strongly advised to perform this upgrade.**
+
+You can download the latest version from our
[download](download.cgi#struts-ga) page.
+
+#### 14 August 2026 - CVE-2026-73635: Unbounded growth of localized-text
caches driven by the request locale {#a20260814-s2074}
+
+The Apache Struts group recommends upgrading to Apache Struts version 7.3.0 or
6.11.0 to mitigate potential security
+vulnerability affecting
[localized-text](https://struts.apache.org/core-developers/localization)
lookups when no fixed
+locale is configured.
+
+> Please read the Security Bulletin
[S2-074](https://cwiki.apache.org/confluence/display/WW/S2-074) to find more
+> details about this security vulnerability
+
+**All developers are strongly advised to perform this upgrade.**
+
+You can download the latest version from our
[download](download.cgi#struts-ga) page.
+
#### 1 August 2026 - Apache Struts version 7.3.0 General Availability
{#a20260801}
The Apache Struts group is pleased to announce that Apache Struts version
7.3.0 is available as a "General Availability"
diff --git a/source/index.html b/source/index.html
index 2993958e7..1f8b9b95f 100644
--- a/source/index.html
+++ b/source/index.html
@@ -50,14 +50,32 @@ title: Welcome to the Apache Struts project
</div>
<div class="row">
<div class="column col-md-4">
- <h2>CVE-2025-68493: XXE vulnerability in XWork component</h2>
+ <h2>Security Bulletins S2-070 to S2-074</h2>
<p>
- Upgrade to at least Apache Struts 6.1.1 to mitigate the
vulnerability.
- </p>
- <p>
- Read more in the <a href="announce-2026#a20260111">Announcement</a>
or in
- the Security Bulletin <a href="{{ site.wiki_url }}/S2-069">S2-069</a>
+ Upgrade to Apache Struts 7.3.0 or 6.11.0 to mitigate the
vulnerabilities.
</p>
+ <ul>
+ <li>
+ <a href="{{ site.wiki_url }}/S2-070">S2-070</a>: shared parsing
state in the JSON plugin
+ (<a href="announce-2026#a20260814-s2070">announcement</a>)
+ </li>
+ <li>
+ <a href="{{ site.wiki_url }}/S2-071">S2-071</a>: shared
serialization state in the JSON plugin
+ (<a href="announce-2026#a20260814-s2071">announcement</a>)
+ </li>
+ <li>
+ <a href="{{ site.wiki_url }}/S2-072">S2-072</a>: unbounded read of
a JSON request body
+ (<a href="announce-2026#a20260814-s2072">announcement</a>)
+ </li>
+ <li>
+ <a href="{{ site.wiki_url }}/S2-073">S2-073</a>: unbounded read of
a Content Security Policy
+ violation report (<a
href="announce-2026#a20260814-s2073">announcement</a>)
+ </li>
+ <li>
+ <a href="{{ site.wiki_url }}/S2-074">S2-074</a>: unbounded growth
of localized-text caches
+ (<a href="announce-2026#a20260814-s2074">announcement</a>)
+ </li>
+ </ul>
</div>
<div class="column col-md-4">
<h2>Google's Patch Reward program</h2>
@@ -68,13 +86,13 @@ title: Welcome to the Apache Struts project
</p>
</div>
<div class="column col-md-4">
- <h2>CVE-2025-64775 File leak in multipart request processing causes
disk exhaustion (DoS)</h2>
+ <h2>CVE-2025-68493: XXE vulnerability in XWork component</h2>
<p>
- Upgrade to Apache Struts 6.8.0 or 7.1.1 to mitigate the
vulnerability.
+ Upgrade to at least Apache Struts 6.1.1 to mitigate the
vulnerability.
</p>
<p>
- Read more in the <a href="announce-2025#a20251201">Announcement</a>
or in
- the Security Bulletin <a href="{{ site.wiki_url }}/S2-068">S2-068</a>
+ Read more in the <a href="announce-2026#a20260111">Announcement</a>
or in
+ the Security Bulletin <a href="{{ site.wiki_url }}/S2-069">S2-069</a>
</p>
</div>
</div>
diff --git a/source/releases.md b/source/releases.md
index 15c8a1b13..8ac1721ef 100644
--- a/source/releases.md
+++ b/source/releases.md
@@ -42,54 +42,54 @@ As a courtesy, we retain archival copies of the website for
releases that initia
If you are running one of the versions below and cannot migrate, see the
[End-of-Life versions](eol-versions.html)
page for available options.
-| Release | Release Date | Vulnerability
[...]
-|-----------------|-------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
[...]
-| Struts 7.2.1 | 15 June 2026 |
[...]
-| Struts 6.10.0 | 25 May 2026 |
[...]
-| Struts 7.1.1 | 18 October 2025 |
[...]
-| Struts 6.9.0 | 27 April 2026 |
[...]
-| Struts 6.8.0 | 5 October 2025 |
[...]
-| Struts 7.0.3 | 3 March 2025 | [S2-068]({{ site.wiki_url }}/S2-068)
[...]
-| Struts 7.0.0 | 19 December 2024 | [S2-068]({{ site.wiki_url }}/S2-068)
[...]
-| Struts 6.7.0 | 17 November 2024 | [S2-068]({{ site.wiki_url }}/S2-068)
[...]
-| Struts 6.6.1 | 18 October 2024 | [S2-068]({{ site.wiki_url }}/S2-068)
[...]
-| Struts 6.6.0 | 10 August 2024 | [S2-068]({{ site.wiki_url }}/S2-068)
[...]
-| Struts 6.4.0 | 19 April 2024 | [S2-068]({{ site.wiki_url }}/S2-068)
[...]
-| Struts 6.3.0.2 | 7 December 2023 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-067]({{ site.wiki_url }}/S2-067)
[...]
-| Struts 6.3.0.1 | 13 September 2023 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-067]({{ site.wiki_url }}/S2-067), [S2-066]({{ site.wiki_url }}/S2-066)
[...]
-| Struts 6.3.0 | 4 September 2023 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-067]({{ site.wiki_url }}/S2-067), [S2-066]({{ site.wiki_url }}/S2-066),
[S2-065]({{ site.wiki_url }}/S2-065)
[...]
-| Struts 6.2.0 | 10 July 2023 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-067]({{ site.wiki_url }}/S2-067), [S2-066]({{ site.wiki_url }}/S2-066),
[S2-065]({{ site.wiki_url }}/S2-065)
[...]
-| Struts 6.1.2.1 | 13 June 2023 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-067]({{ site.wiki_url }}/S2-067), [S2-066]({{ site.wiki_url }}/S2-066),
[S2-065]({{ site.wiki_url }}/S2-065)
[...]
-| Struts 2.5.31 | 13 June 2023 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-067]({{ site.wiki_url }}/S2-067), [S2-066]({{ site.wiki_url }}/S2-066),
[S2-065]({{ site.wiki_url }}/S2-065)
[...]
-| Struts 6.1.2 | 10 March 2023 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-067]({{ site.wiki_url }}/S2-067), [S2-066]({{ site.wiki_url }}/S2-066),
[S2-065]({{ site.wiki_url }}/S2-065), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063)
[...]
-| Struts 6.1.1 | 28 November 2022 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-067]({{ site.wiki_url }}/S2-067), [S2-066]({{ site.wiki_url }}/S2-066),
[S2-065]({{ site.wiki_url }}/S2-065), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063)
[...]
-| Struts 6.0.3 | 15 September 2022 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-067]({{ site.wiki_url }}/S2-067), [S2-066]({{ site.wiki_url }}/S2-066),
[S2-065]({{ site.wiki_url }}/S2-065), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063)
[...]
-| Struts 6.0.0 | 6 June 2022 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-067]({{ site.wiki_url }}/S2-067), [S2-066]({{ site.wiki_url }}/S2-066),
[S2-065]({{ site.wiki_url }}/S2-065), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063)
[...]
-| Struts 2.5.30 | 4 April 2022 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-067]({{ site.wiki_url }}/S2-067), [S2-066]({{ site.wiki_url }}/S2-066),
[S2-065]({{ site.wiki_url }}/S2-065), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063)
[...]
-| Struts 2.5.29 | 22 January 2022 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-066]({{ site.wiki_url }}/S2-066), [S2-065]({{ site.wiki_url }}/S2-065),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063)
[...]
-| Struts 2.5.28.3 | 02 January 2022 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-066]({{ site.wiki_url }}/S2-066), [S2-065]({{ site.wiki_url }}/S2-065),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063)
[...]
-| Struts 2.5.28.2 | 23 December 2021 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-066]({{ site.wiki_url }}/S2-066), [S2-065]({{ site.wiki_url }}/S2-065),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063)
[...]
-| Struts 2.5.28.1 | 17 December 2021 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-066]({{ site.wiki_url }}/S2-066), [S2-065]({{ site.wiki_url }}/S2-065),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063)
[...]
-| Struts 2.5.28 | 12 December 2021 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063)
[...]
-| Struts 2.5.27 | 16 November 2021 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063)
[...]
-| Struts 2.5.26 | 06 December 2020 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063)
[...]
-| Struts 2.5.25 | 28 September 2020 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063)
[...]
-| Struts 2.5.22 | 19 November 2019 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063)
[...]
-| Struts 2.5.20 | 14 January 2019 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063)
[...]
-| Struts 2.5.18 | 26 September 2018 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063)
[...]
-| Struts 2.5.17 | 22 August 2018 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063)
[...]
-| Struts 2.5.16 | 16 March 2018 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063),
[S2-057]({{ site.wiki_url }}/S2-057)
[...]
-| Struts 2.5.14.1 | 30 November 2017 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063),
[S2-057]({{ site.wiki_url }}/S2-057)
[...]
-| Struts 2.5.14 | 23 November 2017 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063),
[S2-057]({{ site.wiki_url }}/S2-057), [S2-055]({{ site.wiki_url }}/S2-055),
[S2-054]({{ site.wiki_url }}/S2-054)
[...]
-| Struts 2.5.13 | 5 September 2017 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063),
[S2-057]({{ site.wiki_url }}/S2-057), [S2-055]({{ site.wiki_url }}/S2-055),
[S2-054]({{ site.wiki_url }}/S2-054)
[...]
-| Struts 2.5.12 | 6 July 2017 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063),
[S2-057]({{ site.wiki_url }}/S2-057), [S2-055]({{ site.wiki_url }}/S2-055),
[S2-054]({{ site.wiki_url }}/S2-054), [S2-052]({{ site.wiki_url }}/S2-052),
[S2-051]({{ site.wiki_url }}/S2-051), [S2-050]({{ site.wiki_url }}/S2-050)
[...]
-| Struts 2.5.10.1 | 7 March 2017 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063),
[S2-057]({{ site.wiki_url }}/S2-057), [S2-055]({{ site.wiki_url }}/S2-055),
[S2-054]({{ site.wiki_url }}/S2-054), [S2-053]({{ site.wiki_url }}/S2-053),
[S2-052]({{ site.wiki_url }}/S2-052), [S2-051]({{ site.wiki_url }}/S2-051),
[S2-050]({{ site.wiki_url }}/S2-050), [S2-049]({{ site.wiki_url }}/S2-049),
[S2-047]({{ site.wiki_url }}/S2-04 [...]
-| Struts 2.5.10 | 3 February 2017 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063),
[S2-057]({{ site.wiki_url }}/S2-057), [S2-055]({{ site.wiki_url }}/S2-055),
[S2-054]({{ site.wiki_url }}/S2-054), [S2-053]({{ site.wiki_url }}/S2-053),
[S2-052]({{ site.wiki_url }}/S2-052), [S2-051]({{ site.wiki_url }}/S2-051),
[S2-050]({{ site.wiki_url }}/S2-050), [S2-049]({{ site.wiki_url }}/S2-049),
[S2-047]({{ site.wiki_url }}/S2-04 [...]
-| Struts 2.5.8 | 19 December 2016 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063),
[S2-057]({{ site.wiki_url }}/S2-057), [S2-055]({{ site.wiki_url }}/S2-055),
[S2-054]({{ site.wiki_url }}/S2-054), [S2-053]({{ site.wiki_url }}/S2-053),
[S2-052]({{ site.wiki_url }}/S2-052), [S2-051]({{ site.wiki_url }}/S2-051),
[S2-050]({{ site.wiki_url }}/S2-050), [S2-049]({{ site.wiki_url }}/S2-049),
[S2-047]({{ site.wiki_url }}/S2-04 [...]
-| Struts 2.5.5 | 21 October 2016 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063),
[S2-057]({{ site.wiki_url }}/S2-057), [S2-055]({{ site.wiki_url }}/S2-055),
[S2-054]({{ site.wiki_url }}/S2-054), [S2-053]({{ site.wiki_url }}/S2-053),
[S2-052]({{ site.wiki_url }}/S2-052), [S2-051]({{ site.wiki_url }}/S2-051),
[S2-050]({{ site.wiki_url }}/S2-050), [S2-049]({{ site.wiki_url }}/S2-049),
[S2-047]({{ site.wiki_url }}/S2-04 [...]
-| Struts 2.5.2 | 7 Jul 2016 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063),
[S2-057]({{ site.wiki_url }}/S2-057), [S2-055]({{ site.wiki_url }}/S2-055),
[S2-054]({{ site.wiki_url }}/S2-054), [S2-053]({{ site.wiki_url }}/S2-053),
[S2-052]({{ site.wiki_url }}/S2-052), [S2-051]({{ site.wiki_url }}/S2-051),
[S2-050]({{ site.wiki_url }}/S2-050), [S2-049]({{ site.wiki_url }}/S2-049),
[S2-047]({{ site.wiki_url }}/S2-04 [...]
-| Struts 2.5.1 | 18 Jun 2016 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063),
[S2-057]({{ site.wiki_url }}/S2-057), [S2-055]({{ site.wiki_url }}/S2-055),
[S2-054]({{ site.wiki_url }}/S2-054), [S2-053]({{ site.wiki_url }}/S2-053),
[S2-052]({{ site.wiki_url }}/S2-052), [S2-051]({{ site.wiki_url }}/S2-051),
[S2-050]({{ site.wiki_url }}/S2-050), [S2-049]({{ site.wiki_url }}/S2-049),
[S2-047]({{ site.wiki_url }}/S2-04 [...]
-| Struts 2.5 | 9 May 2016 | [S2-068]({{ site.wiki_url }}/S2-068),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063),
[S2-057]({{ site.wiki_url }}/S2-057), [S2-055]({{ site.wiki_url }}/S2-055),
[S2-054]({{ site.wiki_url }}/S2-054), [S2-053]({{ site.wiki_url }}/S2-053),
[S2-052]({{ site.wiki_url }}/S2-052), [S2-051]({{ site.wiki_url }}/S2-051),
[S2-050]({{ site.wiki_url }}/S2-050), [S2-049]({{ site.wiki_url }}/S2-049),
[S2-047]({{ site.wiki_url }}/S2-04 [...]
+| Release | Release Date | Vulnerability
[...]
+|-----------------|-------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
[...]
+| Struts 7.2.1 | 15 June 2026 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-073]({{ site.wiki_url }}/S2-073), [S2-072]({{ site.wiki_url }}/S2-072),
[S2-071]({{ site.wiki_url }}/S2-071), [S2-070]({{ site.wiki_url }}/S2-070)
[...]
+| Struts 6.10.0 | 25 May 2026 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-073]({{ site.wiki_url }}/S2-073), [S2-072]({{ site.wiki_url }}/S2-072)
[...]
+| Struts 7.1.1 | 18 October 2025 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-073]({{ site.wiki_url }}/S2-073), [S2-072]({{ site.wiki_url }}/S2-072)
[...]
+| Struts 6.9.0 | 27 April 2026 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-073]({{ site.wiki_url }}/S2-073), [S2-072]({{ site.wiki_url }}/S2-072)
[...]
+| Struts 6.8.0 | 5 October 2025 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-073]({{ site.wiki_url }}/S2-073), [S2-072]({{ site.wiki_url }}/S2-072)
[...]
+| Struts 7.0.3 | 3 March 2025 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-073]({{ site.wiki_url }}/S2-073), [S2-072]({{ site.wiki_url }}/S2-072),
[S2-068]({{ site.wiki_url }}/S2-068)
[...]
+| Struts 7.0.0 | 19 December 2024 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-073]({{ site.wiki_url }}/S2-073), [S2-072]({{ site.wiki_url }}/S2-072),
[S2-068]({{ site.wiki_url }}/S2-068)
[...]
+| Struts 6.7.0 | 17 November 2024 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-073]({{ site.wiki_url }}/S2-073), [S2-072]({{ site.wiki_url }}/S2-072),
[S2-068]({{ site.wiki_url }}/S2-068)
[...]
+| Struts 6.6.1 | 18 October 2024 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-073]({{ site.wiki_url }}/S2-073), [S2-072]({{ site.wiki_url }}/S2-072),
[S2-068]({{ site.wiki_url }}/S2-068)
[...]
+| Struts 6.6.0 | 10 August 2024 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-073]({{ site.wiki_url }}/S2-073), [S2-072]({{ site.wiki_url }}/S2-072),
[S2-068]({{ site.wiki_url }}/S2-068)
[...]
+| Struts 6.4.0 | 19 April 2024 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-073]({{ site.wiki_url }}/S2-073), [S2-072]({{ site.wiki_url }}/S2-072),
[S2-068]({{ site.wiki_url }}/S2-068)
[...]
+| Struts 6.3.0.2 | 7 December 2023 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-073]({{ site.wiki_url }}/S2-073), [S2-072]({{ site.wiki_url }}/S2-072),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-067]({{ site.wiki_url }}/S2-067)
[...]
+| Struts 6.3.0.1 | 13 September 2023 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-073]({{ site.wiki_url }}/S2-073), [S2-072]({{ site.wiki_url }}/S2-072),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-067]({{ site.wiki_url }}/S2-067),
[S2-066]({{ site.wiki_url }}/S2-066)
[...]
+| Struts 6.3.0 | 4 September 2023 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-073]({{ site.wiki_url }}/S2-073), [S2-072]({{ site.wiki_url }}/S2-072),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-067]({{ site.wiki_url }}/S2-067),
[S2-066]({{ site.wiki_url }}/S2-066), [S2-065]({{ site.wiki_url }}/S2-065)
[...]
+| Struts 6.2.0 | 10 July 2023 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-073]({{ site.wiki_url }}/S2-073), [S2-072]({{ site.wiki_url }}/S2-072),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-067]({{ site.wiki_url }}/S2-067),
[S2-066]({{ site.wiki_url }}/S2-066), [S2-065]({{ site.wiki_url }}/S2-065)
[...]
+| Struts 6.1.2.1 | 13 June 2023 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-073]({{ site.wiki_url }}/S2-073), [S2-072]({{ site.wiki_url }}/S2-072),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-067]({{ site.wiki_url }}/S2-067),
[S2-066]({{ site.wiki_url }}/S2-066), [S2-065]({{ site.wiki_url }}/S2-065)
[...]
+| Struts 2.5.31 | 13 June 2023 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-067]({{ site.wiki_url }}/S2-067),
[S2-066]({{ site.wiki_url }}/S2-066), [S2-065]({{ site.wiki_url }}/S2-065)
[...]
+| Struts 6.1.2 | 10 March 2023 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-073]({{ site.wiki_url }}/S2-073), [S2-072]({{ site.wiki_url }}/S2-072),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-067]({{ site.wiki_url }}/S2-067),
[S2-066]({{ site.wiki_url }}/S2-066), [S2-065]({{ site.wiki_url }}/S2-065),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063)
[...]
+| Struts 6.1.1 | 28 November 2022 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-073]({{ site.wiki_url }}/S2-073), [S2-072]({{ site.wiki_url }}/S2-072),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-067]({{ site.wiki_url }}/S2-067),
[S2-066]({{ site.wiki_url }}/S2-066), [S2-065]({{ site.wiki_url }}/S2-065),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063)
[...]
+| Struts 6.0.3 | 15 September 2022 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-073]({{ site.wiki_url }}/S2-073), [S2-072]({{ site.wiki_url }}/S2-072),
[S2-069]({{ site.wiki_url }}/S2-069), [S2-068]({{ site.wiki_url }}/S2-068),
[S2-067]({{ site.wiki_url }}/S2-067), [S2-066]({{ site.wiki_url }}/S2-066),
[S2-065]({{ site.wiki_url }}/S2-065), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063)
[...]
+| Struts 6.0.0 | 6 June 2022 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-073]({{ site.wiki_url }}/S2-073), [S2-072]({{ site.wiki_url }}/S2-072),
[S2-069]({{ site.wiki_url }}/S2-069), [S2-068]({{ site.wiki_url }}/S2-068),
[S2-067]({{ site.wiki_url }}/S2-067), [S2-066]({{ site.wiki_url }}/S2-066),
[S2-065]({{ site.wiki_url }}/S2-065), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063)
[...]
+| Struts 2.5.30 | 4 April 2022 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-067]({{ site.wiki_url }}/S2-067),
[S2-066]({{ site.wiki_url }}/S2-066), [S2-065]({{ site.wiki_url }}/S2-065),
[S2-064]({{ site.wiki_url }}/S2-064), [S2-063]({{ site.wiki_url }}/S2-063)
[...]
+| Struts 2.5.29 | 22 January 2022 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-066]({{ site.wiki_url }}/S2-066),
[S2-065]({{ site.wiki_url }}/S2-065), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063)
[...]
+| Struts 2.5.28.3 | 02 January 2022 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-066]({{ site.wiki_url }}/S2-066),
[S2-065]({{ site.wiki_url }}/S2-065), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063)
[...]
+| Struts 2.5.28.2 | 23 December 2021 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-066]({{ site.wiki_url }}/S2-066),
[S2-065]({{ site.wiki_url }}/S2-065), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063)
[...]
+| Struts 2.5.28.1 | 17 December 2021 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-066]({{ site.wiki_url }}/S2-066),
[S2-065]({{ site.wiki_url }}/S2-065), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063)
[...]
+| Struts 2.5.28 | 12 December 2021 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063)
[...]
+| Struts 2.5.27 | 16 November 2021 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063)
[...]
+| Struts 2.5.26 | 06 December 2020 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063)
[...]
+| Struts 2.5.25 | 28 September 2020 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063)
[...]
+| Struts 2.5.22 | 19 November 2019 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063)
[...]
+| Struts 2.5.20 | 14 January 2019 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063)
[...]
+| Struts 2.5.18 | 26 September 2018 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063)
[...]
+| Struts 2.5.17 | 22 August 2018 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063)
[...]
+| Struts 2.5.16 | 16 March 2018 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063), [S2-057]({{ site.wiki_url }}/S2-057)
[...]
+| Struts 2.5.14.1 | 30 November 2017 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063), [S2-057]({{ site.wiki_url }}/S2-057)
[...]
+| Struts 2.5.14 | 23 November 2017 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063), [S2-057]({{ site.wiki_url }}/S2-057),
[S2-055]({{ site.wiki_url }}/S2-055), [S2-054]({{ site.wiki_url }}/S2-054)
[...]
+| Struts 2.5.13 | 5 September 2017 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063), [S2-057]({{ site.wiki_url }}/S2-057),
[S2-055]({{ site.wiki_url }}/S2-055), [S2-054]({{ site.wiki_url }}/S2-054)
[...]
+| Struts 2.5.12 | 6 July 2017 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063), [S2-057]({{ site.wiki_url }}/S2-057),
[S2-055]({{ site.wiki_url }}/S2-055), [S2-054]({{ site.wiki_url }}/S2-054),
[S2-052]({{ site.wiki_url }}/S2-052), [S2-051]({{ site.wiki_url }}/S2-051),
[S2-050]({{ site.wiki_url }}/S2-05 [...]
+| Struts 2.5.10.1 | 7 March 2017 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063), [S2-057]({{ site.wiki_url }}/S2-057),
[S2-055]({{ site.wiki_url }}/S2-055), [S2-054]({{ site.wiki_url }}/S2-054),
[S2-053]({{ site.wiki_url }}/S2-053), [S2-052]({{ site.wiki_url }}/S2-052),
[S2-051]({{ site.wiki_url }}/S2-05 [...]
+| Struts 2.5.10 | 3 February 2017 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063), [S2-057]({{ site.wiki_url }}/S2-057),
[S2-055]({{ site.wiki_url }}/S2-055), [S2-054]({{ site.wiki_url }}/S2-054),
[S2-053]({{ site.wiki_url }}/S2-053), [S2-052]({{ site.wiki_url }}/S2-052),
[S2-051]({{ site.wiki_url }}/S2-05 [...]
+| Struts 2.5.8 | 19 December 2016 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063), [S2-057]({{ site.wiki_url }}/S2-057),
[S2-055]({{ site.wiki_url }}/S2-055), [S2-054]({{ site.wiki_url }}/S2-054),
[S2-053]({{ site.wiki_url }}/S2-053), [S2-052]({{ site.wiki_url }}/S2-052),
[S2-051]({{ site.wiki_url }}/S2-05 [...]
+| Struts 2.5.5 | 21 October 2016 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063), [S2-057]({{ site.wiki_url }}/S2-057),
[S2-055]({{ site.wiki_url }}/S2-055), [S2-054]({{ site.wiki_url }}/S2-054),
[S2-053]({{ site.wiki_url }}/S2-053), [S2-052]({{ site.wiki_url }}/S2-052),
[S2-051]({{ site.wiki_url }}/S2-05 [...]
+| Struts 2.5.2 | 7 Jul 2016 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063), [S2-057]({{ site.wiki_url }}/S2-057),
[S2-055]({{ site.wiki_url }}/S2-055), [S2-054]({{ site.wiki_url }}/S2-054),
[S2-053]({{ site.wiki_url }}/S2-053), [S2-052]({{ site.wiki_url }}/S2-052),
[S2-051]({{ site.wiki_url }}/S2-05 [...]
+| Struts 2.5.1 | 18 Jun 2016 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063), [S2-057]({{ site.wiki_url }}/S2-057),
[S2-055]({{ site.wiki_url }}/S2-055), [S2-054]({{ site.wiki_url }}/S2-054),
[S2-053]({{ site.wiki_url }}/S2-053), [S2-052]({{ site.wiki_url }}/S2-052),
[S2-051]({{ site.wiki_url }}/S2-05 [...]
+| Struts 2.5 | 9 May 2016 | [S2-074]({{ site.wiki_url }}/S2-074),
[S2-072]({{ site.wiki_url }}/S2-072), [S2-069]({{ site.wiki_url }}/S2-069),
[S2-068]({{ site.wiki_url }}/S2-068), [S2-064]({{ site.wiki_url }}/S2-064),
[S2-063]({{ site.wiki_url }}/S2-063), [S2-057]({{ site.wiki_url }}/S2-057),
[S2-055]({{ site.wiki_url }}/S2-055), [S2-054]({{ site.wiki_url }}/S2-054),
[S2-053]({{ site.wiki_url }}/S2-053), [S2-052]({{ site.wiki_url }}/S2-052),
[S2-051]({{ site.wiki_url }}/S2-05 [...]
The documentation is bundled with each
[distribution.](http://archive.apache.org/dist/struts/)
We **strongly recommend** installing the documentation for a release locally,
so as to conserve bandwidth.
