Child pages
  • Version Notes
Skip to end of metadata
Go to start of metadata

(tick) These are the notes for the Struts distribution.

(tick) For prior notes in this release series, see Version Notes 2.5.14

  • If you are a Maven user, you might want to get started using the Maven Archetype.
Maven Dependency

You can also use Struts Archetype Catalog like below

Struts Archetype Catalog
mvn archetype:generate -DarchetypeCatalog=
Staging Repository
    <name>ASF Nexus Staging</name>

Internal Changes

  • (warning) A crafted JSON request can be used to perform a DoS attack when using the Struts REST plugin, see S2-054
  • (warning) Vulnerability in the Jackson JSON library, see S2-055


  • [WW-4892] - Use Jackson handler to handle JSON by default


  • [WW-4893] - Upgrade Jackson to version 2.9.2


This release contains fixes related to S2-054 and S2-055 - please read them carefully!

Issue Detail

Issue List

Other resources