Apache Struts: versions, end of support and vulnerabilities
Release branches of Apache Struts with the latest version, the end of support and the vulnerabilities that are still open in the latest version.
The NVD lists 100 vulnerabilities for Apache Struts, 9 of them actively exploited. Last checked on 02/11/2026.
Release branches
Apache Struts 7
Latest version: 7.4.0, released on 17/09/2026
End of support: no date known
No known vulnerability open in 7.4.0
Apache Struts 6
Latest version: 6.12.0, released on 17/09/2026
End of support: no date known
No known vulnerability open in 6.12.0
Apache Struts 2.5
Latest version: 2.5.33, released on 05/12/2023
End of support: 30/04/2024
12 known vulnerabilities open in 2.5.33
Apache Struts 2.3
Latest version: 2.3.37, released on 30/12/2018
End of support: 14/05/2019
20 known vulnerabilities open in 2.3.37
Apache Struts 2.2
Latest version: 2.2.3.1, released on 07/09/2011
End of support: no date known
56 known vulnerabilities open in 2.2.3.1
Apache Struts 2.1
Latest version: 2.1.8.1, released on 02/10/2009
End of support: no date known
60 known vulnerabilities open in 2.1.8.1
Apache Struts 1.3
Latest version: 1.3.10, released on 07/12/2008
End of support: 05/04/2013
10 known vulnerabilities open in 1.3.10
Apache Struts 2.0
Latest version: 2.0.14, released on 16/11/2008
End of support: no date known
56 known vulnerabilities open in 2.0.14
Apache Struts 1.2
Latest version: 1.2.9, released on 23/03/2006
End of support: no date known
9 known vulnerabilities open in 1.2.9
Most recent vulnerabilities of Apache Struts
- CVE-2026-104714, CVSS 3.1: 8.8, 05/10/2026
- CVE-2026-104713, CVSS 3.1: 6.5, 05/10/2026
- CVE-2026-104712, CVSS 3.1: 7.5, 05/10/2026
- CVE-2026-104711, CVSS 3.1: 9.8, 05/10/2026
- CVE-2026-73635, CVSS 3.1: 7.5, 15/08/2026
- CVE-2026-73634, CVSS 3.1: 7.5, 15/08/2026
- CVE-2026-73632, CVSS 3.1: 4.3, 15/08/2026
- CVE-2026-73631, CVSS 3.1: 4.3, 15/08/2026
- CVE-2026-73633, CVSS 3.1: 7.5, 14/08/2026
- CVE-2025-68493, CVSS 3.1: 8.1, 11/01/2026
Get notified
Add Apache Struts with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add Apache Struts