In Standalone artifacts https://dist.apache.org/repos/dist/dev/struts/7.1.0/ there are

 * commons-logging-1.3.4
 * commons-io-2.18.0 (CVE-2025-48924)


Maybe we should use

 * commons-logging-1.3.5
 * commons-io-2.20.0


Best regards
Markus


Am 24.09.25 um 10:14 schrieb Lukasz Lenart:
Hello,

This is a minor release of Struts 7.x which contains only some small
breaking changes.
Please take your time and test the bits - any help is appreciated.
Please report any problems you will spot.

Here are the changes from the previous version:
https://github.com/apache/struts/releases/tag/STRUTS_7_1_0

Staging Maven repo
https://repository.apache.org/content/groups/staging/

Standalone artifacts
https://dist.apache.org/repos/dist/dev/struts/7.1.0/

Release notes
https://cwiki.apache.org/confluence/display/WW/Version+Notes+7.1.0


Kind regards
--
Ɓukasz

---------------------------------------------------------------------
To unsubscribe, e-mail:[email protected]
For additional commands, e-mail:[email protected]

Reply via email to