(tick) These are the notes for the Struts distribution.

(tick) For prior notes in this release series, see Version Notes 2.5.14

  • If you are a Maven user, you might want to get started using the Maven Archetype.
Maven Dependency

You can also use Struts Archetype Catalog like below

Struts Archetype Catalog
mvn archetype:generate -DarchetypeCatalog=http://struts.apache.org/
Staging Repository
    <name>ASF Nexus Staging</name>

Internal Changes

  • (warning) A crafted JSON request can be used to perform a DoS attack when using the Struts REST plugin, see S2-054
  • (warning) Vulnerability in the Jackson JSON library, see S2-055


  • [WW-4892] - Use Jackson handler to handle JSON by default


  • [WW-4893] - Upgrade Jackson to version 2.9.2


This release contains fixes related to S2-054 and S2-055 - please read them carefully!

Issue Detail

Issue List

Other resources