google / google/guice

Patch Apache Struts to fix multiple Critical CVEs

Open
#1,850 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
12.7k
Forks
1.7k
Avg merge
11m
Merged PRs (30d)
2

Description

https://cwiki.apache.org/confluence/display/WW/S2-067

https://thehackernews.com/2024/12/patch-alert-critical-apache-struts-flaw.html?m=1

Multiple critical CVEs have been opened against Struts and Guice has not patched the Struts version it calls, potentially introducing users of Guice to unnecessary risk. Please patch Struts to a modern version.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.