In Standalone artifacts
https://dist.apache.org/repos/dist/dev/struts/7.1.0/ there are
* commons-logging-1.3.4
* commons-io-2.18.0 (CVE-2025-48924)
Maybe we should use
* commons-logging-1.3.5
* commons-io-2.20.0
Best regards
Markus
Am 24.09.25 um 10:14 schrieb Lukasz Lenart:
Hello,
This is a minor release of Struts 7.x which contains only some small
breaking changes.
Please take your time and test the bits - any help is appreciated.
Please report any problems you will spot.
Here are the changes from the previous version:
https://github.com/apache/struts/releases/tag/STRUTS_7_1_0
Staging Maven repo
https://repository.apache.org/content/groups/staging/
Standalone artifacts
https://dist.apache.org/repos/dist/dev/struts/7.1.0/
Release notes
https://cwiki.apache.org/confluence/display/WW/Version+Notes+7.1.0
Kind regards
--
Ćukasz
---------------------------------------------------------------------
To unsubscribe, e-mail:[email protected]
For additional commands, e-mail:[email protected]