My unofficial answer: Jenkins uses Stapler as its web framework (not Struts), so I strongly suspect there are zero Jenkins plugins distributed on our Update Center that bundle Struts 2 or 3. For an official answer, contact the Security Team at:
https://www.jenkins.io/security/team/ -- You received this message because you are subscribed to the Google Groups "Jenkins Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-dev+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/CAFwNDjqffiHNRYsaTiqV_RBBmTvCs%3DDMZiz%2BFW_KabTpfw%3D1rA%40mail.gmail.com.
