Hello, It might be good to mark https://github.com/apache/struts1 as 'archived' and remove unsupported versions from https://downloads.apache.org/struts/ - could someone have a look at that?
Kind regards, -- Arnout Engelen ASF Security Response Apache Pekko PMC member, ASF Member NixOS Committer Independent Open Source consultant