Threats affecting pkg:maven/Apache Software Foundation/com.opensymphony:xwork

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.1	EPSS 50%	CVE-2025-68493Apache Struts · XML External Entity (XXE) High8.1EPSS 50%2026-01-11CVE Database V5CVE-2025-68493 Missing XML Validation vulnerability in Apache Struts, Apache Struts. This issue affects Apache Struts: from 2.0.0 before 2.2.1; Apache Struts: from 2.2.1 through 6.1.0. Users are recommended to upgrade to version 6.1.1, which fixes the issue. EPSS 50%Vulnerability Apache Software Foundation CWE-611	CVE Database V5	2026-01-11

Page 1 of 1