(tick) These are the notes for the Struts version 6.9.0 distribution.

(tick) For prior notes in this release series, see Version Notes 6.8.0

Maven users

If you are a Maven user, you might want to get started using the Maven Archetype.

Maven Dependency
<dependency>
  <groupId>org.apache.struts</groupId>
  <artifactId>struts2-core</artifactId>
  <version>6.10.0</version>
</dependency>

You can also use Struts Archetype Catalog like below

Struts Archetype Catalog
mvn archetype:generate -DarchetypeCatalog=http://struts.apache.org/

Bug

  • [WW-5623] - XSS in PostbackResult.doExecute()

Dependency

  • [WW-5628] - bump asm.version from 9.9.1 to 9.10
  • [WW-5629] - bump log4j2.version from 2.25.4 to 2.26.0

Issue Detail

Issue List

Other resources