My Maven Eclipse pluing tells me that struts2-core-2.2.1 depends on
xwork-core-2.2.1.

On Sat, Nov 13, 2010 at 8:36 PM, Sarr, Nathan
<ns...@library.rochester.edu>wrote:

> Hello,
>
>    I was wondering if someone could help me out with the Struts 2.2.1
> dependency list.  It looks like struts 2.2.1 depends on XWork 2.1.6.
>  However the release notes for Strtus 2.2.1 recommend using XWork 2.2.0.  I
> couldn't find XWork 2.2.0 but could find XWork 2.2.1.
>
>   Is it recommended to upgrade to XWork 2.2.1 and Ognl 3.0 to fix the
> critical XWork vulnerability fixed in Stuts 2.2.1?
>
> Thanks in advance for the help.
> -Nate
>

Reply via email to