UnratedFix available
Struts 6.9.0
Struts 6.9.0 includes XML parser hardening against Entity Expansion (Billion Laughs) attacks and configurable JSON limits for DoS prevention.
Announced Group revision 1
Original source ↗github-apache-struts
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
WW-5621 Harden XML parsers against Entity Expansion (Billion Laughs) attacks [S6]
Struts
Release notes from struts Struts 6.9.0
- Affected versions
- Not stated in this extraction
- Fixed versions
- 6.9.0
Release notes from struts Struts 6.9.0
- Prerequisites
- Not stated in this extraction
Publisher severity
No explicit severity was extracted.
- Event
- #78219 · Revision 1
- Added to Heist Feed
- Publisher date