struts:struts

v1.2.9Maven· Java

The verdict

Has 7 high-severity advisories. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the Maven registry · derived rules, not AI

How it scores

MaintenanceAbandoned

PopularityUnknown

Security7 advisories

LicenseUnknown

DepsZero deps

Maintenance

Last published 20 years ago.

Popularity

Download count unavailable.

Security

7 known advisories (worst: high severity).

License

No license declared.

Dependencies

No runtime dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
Apache Struts vulnerable to memory exhaustion
GHSA-4g42-gqrg-4633 Published 2023-06-14
HIGH
Improper Input Validation in Apache Struts
GHSA-5ggr-mpgw-3mgx Published 2022-05-13
HIGH
Improper Input Validation in Apache Struts
GHSA-7jw3-5q4w-89qg Published 2022-05-13
HIGH
Improper Input Validation in Apache Struts
GHSA-cvvx-r33m-v7pq Published 2022-05-14
HIGH
Apache Tiles: Unvalidated input may lead to path traversal and XXE
GHSA-qw4h-3xjj-84cc Published 2023-12-01
MEDIUM
Apache Struts Extras Before 2 has an Improper Output Neutralization for Logs Vulnerability
GHSA-cx25-xg7c-xfm5 Published 2025-07-30
MEDIUM
Apache Struts Cross-site Scripting vulnerability
GHSA-wcgx-2hvx-5cwr Fixed in 1.2.9-162.31.1Published 2022-05-01

Recent releases