Apache Struts
Apache Struts is a free, open-source, MVC framework for creating elegant, modern Java web applications. It favors convention over configuration, is extensible using a plugin architecture, and ships with plugins to support REST, AJAX and JSON.
Download
Technology Primer
Apache Struts 7.4.0 GA
Apache Struts 7.4.0 GA has been released
on 2 October 2026.
Apache Struts 6.12.0 GA
Apache Struts 6.12.0 GA has been released
on 2 October 2026.
End-of-Life Struts Versions
Some Struts versions are no longer supported and receive no further security patches. We recommend migrating to the latest release. If migration is not immediately feasible, see End-of-Life versions for available options.
Security Bulletins S2-075 to S2-078
Upgrade to Apache Struts 7.4.0 or 6.12.0 to mitigate the vulnerabilities.
- S2-075: OGNL injection in the legacy RESTful action mapper (announcement)
- S2-076: disproportionate response size when rendering BigDecimal request parameters (announcement)
- S2-077: unbounded request body read in the REST plugin (announcement)
- S2-078: shared message formatter exposes date and time values (announcement)