Browse Security Advisories
High Security Advisories for https://github.com/apache/struts Clear Filters
High
over 2 years ago
Apache Struts Improper Control of Dynamically-Managed Code Resources vulnerability
maven
org.apache.struts:struts2-core
High
about 3 years ago
Apache Struts vulnerable to memory exhaustion
maven
org.apache.struts:struts2-core
High
about 4 years ago
Code injection in Apache Struts
maven
org.apache.struts:struts2-rest-plugin, org.apache.struts:struts2-core
High
about 4 years ago
Incomplete exclude pattern in Apache Struts
maven
org.apache.struts.xwork:xwork-core, org.apache.struts:struts2-core
High
about 4 years ago
Arbitrary code execution in Apache Struts 2
maven
org.apache.struts.xwork:xwork-core, org.apache.struts:struts2-core
High
about 4 years ago
Arbitrary code execution in Apache Struts 2
maven
org.apache.struts.xwork:xwork-core, org.apache.struts:struts2-core
High
about 4 years ago
Apache Struts Code injection due to conversion error
maven
org.apache.struts:struts2-core
High
about 4 years ago
Arbitrary code execution in Apache Struts
maven
org.apache.struts.xwork:xwork-core, org.apache.struts:struts2-core
High
about 4 years ago
Improper Control of Generation of Code in Apache Struts
maven
org.apache.struts:struts2-core
High
about 4 years ago
ClassLoader manipulation in Apache Struts
maven
org.apache.struts:struts2-core
High
about 4 years ago
Code injection in Apache Struts
maven
org.apache.struts.xwork:xwork-core, org.apache.struts:struts2-core
High
over 4 years ago
Unrestricted Upload of File with Dangerous Type in Apache Struts2
maven
org.apache.struts:struts2-core
High
almost 8 years ago
REST Plugin in Apache Struts uses an XStreamHandler with an instance of XStream for deserialization without any type filtering
maven
org.apache.struts:struts2-rest-plugin
High
almost 8 years ago
Apache Struts allows entering a custom URL in a form field if built-in URLValidator is used
maven
org.apache.struts:struts2-core
High
almost 8 years ago
Spring AOP functionality (Struts) vulnerable to DoS attack
maven
org.apache.struts:struts2-core
High
almost 8 years ago
Apache Struts REST Plugin can potentially allow a DoS attack
maven
org.apache.struts:struts2-rest-plugin
Filter by Severity
Filter by Source
Filter by Ecosystem
npm
2,807
maven
2,640
pypi
2,478
packagist
1,903
go
1,804
nuget
1,382
cargo
554
rubygems
369
cpan
101
hex
90
actions
23
swift
22
pub
6
Filter by Package
Microsoft.ChakraCore
234
openclaw
217
tensorflow
122
tensorflow-cpu
112
tensorflow-gpu
112
magento/community-edition
104
moodle/moodle
68
open-webui
61
org.jenkins-ci.main:jenkins-core
61
wwbn/avideo
56
n8n
53
parse-server
49
flowise
49
com.fasterxml.jackson.core:jackson-databind
45
Django
43
mlflow
42
apache-airflow
41
org.apache.tomcat:tomcat
40
dolibarr/dolibarr
38
pimcore/pimcore
38
magento/project-community-edition
38
craftcms/cms
38
github.com/rancher/rancher
36
librenms/librenms
36
getgrav/grav
32
drupal/core
32
typo3/cms
32
thorsten/phpmyfaq
32
salt
31
typo3/cms-core
31
code.gitea.io/gitea
31
gogs.io/gogs
31
phpmyadmin/phpmyadmin
28
pillow
28
Plone
28
microweber/microweber
27
Magick.NET-Q16-AnyCPU
26
praisonai
26
next
26
org.keycloak:keycloak-services
26
nokogiri
26
symfony/symfony
25
org.apache.tomcat.embed:tomcat-embed-core
25
org.apache.struts:struts2-core
25
drupal/drupal
25
com.liferay.portal:release.portal.bom
25
github.com/mattermost/mattermost-server
24
ansible
24
github.com/siyuan-note/siyuan/kernel
24
Magick.NET-Q16-HDRI-AnyCPU
24
Magick.NET-Q16-HDRI-x86
23
opencv-python
23
github.com/hashicorp/vault
23
Magick.NET-Q16-HDRI-OpenMP-arm64
23
opencv-contrib-python
23
Magick.NET-Q16-x86
23
Magick.NET-Q16-HDRI-x64
22
Magick.NET-Q16-OpenMP-arm64
22
Magick.NET-Q16-x64
22
Magick.NET-Q16-OpenMP-x64
22
github.com/zitadel/zitadel
22
Magick.NET-Q16-HDRI-arm64
22
Magick.NET-Q8-AnyCPU
22
com.thoughtworks.xstream:xstream
22
Magick.NET-Q16-arm64
22
django
21
matrix-synapse
21
Magick.NET-Q8-arm64
21
Pillow
21
com.jfinal:jfinal
21
@anthropic-ai/claude-code
21
Magick.NET-Q8-x86
21
github.com/filebrowser/filebrowser/v2
21
Magick.NET-Q8-OpenMP-arm64
21
github.com/traefik/traefik/v2
21
Magick.NET-Q8-OpenMP-x64
20
pocketmine/pocketmine-mp
20
mantisbt/mantisbt
20
picklescan
20
froxlor/froxlor
19
DBD-SQLite
19
vllm
19
org.jenkins-ci.plugins:script-security
19
directus
19
gradio
19
io.undertow:undertow-core
19
Magick.NET-Q8-x64
18
pyload-ng
18
electron
18
com.liferay.portal:release.dxp.bom
18
axios
18
rack
18
keystone
18
rdiffweb
18
Magick.NET-Q16-HDRI-OpenMP-x64
18
phpoffice/phpspreadsheet
17
github.com/traefik/traefik/v3
17
org.xwiki.platform:xwiki-platform-oldcore
17
github.com/grafana/grafana
17
Microsoft.AspNetCore.App.Runtime.win-arm
17
litellm
17
shopware/platform
17
getkirby/cms
17
deno
17
Microsoft.AspNetCore.App.Runtime.win-x64
17
github.com/nats-io/nats-server/v2
16
github.com/usememos/memos
16
openssl-src
16
surrealdb
16
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
16
Microsoft.NetCore.App.Runtime.win-arm
16
Microsoft.NetCore.App.Runtime.win-x64
16
PraisonAI
16
yeswiki/yeswiki
16
Microsoft.AspNetCore.App.Runtime.linux-arm
16
Microsoft.NetCore.App.Runtime.linux-musl-arm
16
Microsoft.NetCore.App.Runtime.win-x86
16
shopware/core
16
Microsoft.AspNetCore.App.Runtime.linux-x64
16
Microsoft.AspNetCore.App.Runtime.linux-arm64
16
Microsoft.NetCore.App.Runtime.linux-arm64
16
mautic/core
16
Microsoft.NetCore.App.Runtime.win-arm64
16
Microsoft.NetCore.App.Runtime.linux-arm
16
org.apache.solr:solr-core
16
openbabel
16
Microsoft.AspNetCore.App.Runtime.linux-musl-x64
16
nilsteampassnet/teampass
15
github.com/kyverno/kyverno
15
github.com/hashicorp/consul
15
github.com/mattermost/mattermost/server/v8
15
baserproject/basercms
15
apache-superset
15
Microsoft.NetCore.App.Runtime.linux-musl-arm64
15
praisonaiagents
15
concrete5/concrete5
15
Microsoft.AspNetCore.App.Runtime.win-x86
15
org.keycloak:keycloak-core
14
snipe/snipe-it
14
statamic/cms
14
Microsoft.NetCore.App.Runtime.linux-x64
14
org.apache.openmeetings:openmeetings-parent
14
devcode-it/openstamanager
14
mindsdb
14
pnpm
14
Microsoft.AspNetCore.App.Runtime.win-arm64
14
Microsoft.NetCore.App.Runtime.linux-musl-x64
14
tar
14
Microsoft.AspNetCore.App.Runtime.osx-x64
14
langflow
14
phpmyfaq/phpmyfaq
14
centreon/centreon
14
org.apache.tomcat:tomcat-catalina
14
net.mingsoft:ms-mcms
14
@budibase/server
14
vyper
14
github.com/hashicorp/nomad
13
golang.org/x/net
13
pgadmin4
13
cockpit-hq/cockpit
13
rubygems-update
13
Microsoft.NetCore.App.Runtime.osx-arm64
13
Microsoft.NetCore.App.Runtime.osx-x64
13
github.com/gotenberg/gotenberg/v8
13
github.com/coder/coder/v2
13
praisonai-platform
12
github.com/argoproj/argo-cd
12
openmage/magento-lts
12
composer/composer
12
github.com/ethereum/go-ethereum
12
silverstripe/framework
12
github.com/argoproj/argo-cd/v2
12
activerecord
12
better-auth
12
org.springframework.security:spring-security-core
11
Microsoft.AspNetCore.App.Runtime.linux-musl-arm
11
Magick.NET-Q16-OpenMP-x86
11
actionpack
11
org.apache.tomcat:tomcat-coyote
11
github.com/ollama/ollama
11
laravel/framework
11
org.keycloak:keycloak-parent
11
github.com/zitadel/zitadel/v2
11
intelliants/subrion
11
k8s.io/ingress-nginx
10
tornado
10
oj
10
nltk
10
DotNetNuke.Core
10
lollms
10
org.eclipse.jetty:jetty-server
10
Microsoft.AspNetCore.App.Runtime.osx-arm64
10
apollo-router
10
k8s.io/kubernetes
10
hackney
10
github.com/traefik/traefik
10
cryptography
10
nova
10
org.bouncycastle:bcprov-jdk14
10
github.com/minio/minio
10
Filter by Repository
https://github.com/chakra-core/ChakraCore
204
https://github.com/tensorflow/tensorflow
122
https://github.com/xwiki/xwiki-platform
64
https://github.com/django/django
52
https://github.com/FasterXML/jackson-databind
44
https://github.com/jenkinsci/jenkins
43
https://github.com/apache/tomcat
42
https://github.com/apache/airflow
39
https://github.com/python-pillow/Pillow
35
https://github.com/moodle/moodle
34
https://github.com/keycloak/keycloak
32
https://github.com/dotnet/runtime
28
https://github.com/librenms/librenms
28
https://github.com/pimcore/pimcore
28
https://github.com/rancher/rancher
27
https://github.com/microweber/microweber
25
https://github.com/opencv/opencv
25
https://github.com/symfony/symfony
23
https://github.com/x-stream/xstream
22
https://github.com/Dolibarr/dolibarr
21
https://github.com/apache/struts
20
https://github.com/sparklemotion/nokogiri
20
https://github.com/spring-projects/spring-framework
19
https://github.com/ansible/ansible
19
https://github.com/zitadel/zitadel
18
https://github.com/TYPO3/typo3
18
https://github.com/thorsten/phpmyfaq
18
https://github.com/pmmp/PocketMine-MP
18
https://github.com/ikus060/rdiffweb
17
https://github.com/parse-community/parse-server
17
https://github.com/mlflow/mlflow
16
https://github.com/plone/Products.CMFPlone
16
https://github.com/gradio-app/gradio
16
https://github.com/rails/rails
15
https://github.com/github/advisory-database
15
https://github.com/getgrav/grav
15
https://github.com/apache/inlong
15
https://github.com/kubernetes/kubernetes
15
https://github.com/usememos/memos
14
https://github.com/grafana/grafana
14
https://github.com/argoproj/argo-cd
14
https://github.com/jenkinsci/script-security-plugin
14
https://github.com/openstack/keystone
14
https://github.com/vyperlang/vyper
14
https://github.com/undertow-io/undertow
13
https://github.com/matrix-org/synapse
13
https://github.com/mautic/mautic
13
https://github.com/liferay/liferay-portal
13
https://github.com/saltstack/salt
13
https://github.com/mindsdb/mindsdb
13
https://github.com/directus/directus
12
https://github.com/PHPOffice/PhpSpreadsheet
12
https://github.com/denoland/deno
12
https://github.com/electron/electron
12
https://github.com/hashicorp/consul
12
https://github.com/run-llama/llama_index
11
https://github.com/silverstripe/silverstripe-framework
11
https://github.com/erlang/otp
11
https://github.com/strapi/strapi
11
https://github.com/apache/nifi
11
https://github.com/dotnet/aspnetcore
11
https://github.com/hashicorp/vault
11
https://github.com/netty/netty
10
https://github.com/funadmin/funadmin
10
https://github.com/centreon/centreon
10
https://github.com/octobercms/october
10
https://github.com/go-gitea/gitea
10
https://github.com/OpenMage/magento-lts
10
https://github.com/surrealdb/surrealdb
10
https://github.com/rack/rack
10
https://github.com/FlowiseAI/Flowise
10
https://github.com/golang/go
10
https://github.com/vercel/next.js
9
https://github.com/nilsteampassnet/teampass
9
https://github.com/cui2shark/cms
9
https://github.com/opencontainers/runc
9
https://github.com/apache/camel
9
https://github.com/spring-projects/spring-security
9
https://github.com/pyload/pyload
9
https://github.com/traefik/traefik
9
https://github.com/geoserver/geoserver
9
https://github.com/snipe/snipe-it
9
https://github.com/laravel/framework
9
https://github.com/anthropics/claude-code
9
https://github.com/rusqlite/rusqlite
9
https://github.com/apollographql/router
9
https://github.com/nervosnetwork/ckb
9
https://github.com/openstack/nova
9
https://github.com/apache/cxf
9
https://github.com/h2oai/h2o-3
9
https://github.com/cloudfoundry/uaa
9
https://github.com/vllm-project/vllm
8
https://github.com/pyca/cryptography
8
https://github.com/open-webui/open-webui
8
https://github.com/gogs/gogs
8
https://github.com/phpmyadmin/phpmyadmin
8
https://github.com/PaddlePaddle/Paddle
8
https://github.com/cockpit-hq/cockpit
8
https://github.com/bcgit/bc-java
8
https://github.com/sqlite/sqlite
8
https://github.com/nats-io/nats-server
8
https://github.com/craftcms/cms
8
https://github.com/apache/kylin
8
https://github.com/dnnsoftware/Dnn.Platform
8
https://github.com/OpenRefine/OpenRefine
8
https://github.com/OPCFoundation/UA-.NETStandard
8
https://github.com/shopware/platform
8
https://github.com/TYPO3/TYPO3.CMS
8
https://github.com/backstage/backstage
8
https://github.com/YesWiki/yeswiki
7
https://github.com/contao/contao
7
https://github.com/shopware/shopware
7
https://github.com/rubygems/rubygems
7
https://github.com/mattermost/mattermost
7
https://github.com/composer/composer
7
https://github.com/PHPMailer/PHPMailer
7
https://github.com/filebrowser/filebrowser
7
https://github.com/apache/activemq
7
https://github.com/mantisbt/mantisbt
7
https://github.com/parisneo/lollms
7
https://github.com/smarty-php/smarty
7
https://github.com/cobbler/cobbler
7
https://github.com/faucetsdn/ryu
7
https://github.com/xuxueli/xxl-job
7
https://github.com/eclipse/jetty.project
7
https://github.com/DSpace/DSpace
7
https://github.com/magento/magento2
7
https://github.com/MobSF/Mobile-Security-Framework-MobSF
7
https://github.com/madler/zlib
6
https://github.com/intelliants/subrion
6
https://github.com/Graylog2/graylog2-server
6
https://github.com/dromara/hutool
6
https://github.com/OpenNMS/opennms
6
https://github.com/RaspAP/raspap-webgui
6
https://github.com/aubio/aubio
6
https://github.com/minio/minio
6
https://github.com/hyperledger/fabric
6
https://github.com/nilsteampassnet/TeamPass
6
https://github.com/gravitl/netmaker
6
https://github.com/Perl/perl5
6
https://github.com/haxtheweb/issues
6
https://github.com/TYPO3-CMS/core
6
https://github.com/bodil/sized-chunks
6
https://github.com/getkirby/kirby
6
https://github.com/getsentry/sentry
6
https://github.com/OpenZeppelin/openzeppelin-contracts
6
https://github.com/npm/node-tar
6
https://github.com/kyverno/kyverno
6
https://github.com/cosmos/cosmos-sdk
6
https://github.com/WWBN/AVideo
6
https://github.com/cefsharp/CefSharp
6
https://github.com/matrix-org/matrix-js-sdk
6
https://github.com/cilium/cilium
6
https://github.com/langchain-ai/langchain
6
https://github.com/containers/podman
6
https://github.com/istio/istio
6
https://github.com/ash-project/ash
6
https://github.com/pgadmin-org/pgadmin4
6
https://github.com/DrunkenShells/Disclosures
6
https://github.com/ethyca/fides
6
https://github.com/nautobot/nautobot
6
https://github.com/goharbor/harbor
6
https://github.com/protocolbuffers/protobuf
6
https://github.com/froxlor/froxlor
6
https://github.com/quarkusio/quarkus
6
https://github.com/sequelize/sequelize
6
https://github.com/kiwitcms/Kiwi
6
https://github.com/mmaitre314/picklescan
6
https://github.com/opencast/opencast
6
https://github.com/CVEProject/cvelist
6
https://github.com/ImageMagick/ImageMagick
6
https://github.com/drupal/core
6
https://github.com/guzzle/guzzle
6
https://github.com/docker/docker
5
https://github.com/apache/hadoop
5
https://github.com/faisalman/ua-parser-js
5
https://github.com/zendframework/zendframework
5
https://github.com/opencart/opencart
5
https://github.com/cri-o/cri-o
5
https://github.com/bolt/bolt
5
https://github.com/ethereum/go-ethereum
5
https://github.com/cometbft/cometbft
5
https://github.com/apache/xmlgraphics-batik
5
https://github.com/element-hq/synapse
5
https://github.com/benoitc/hackney
5
https://github.com/zopefoundation/Zope
5
https://github.com/sebhildebrandt/systeminformation
5
https://github.com/axios/axios
5
https://github.com/HumanSignal/label-studio
5
https://github.com/apache/dolphinscheduler
5
https://github.com/beego/beego
5
https://github.com/vantage6/vantage6
5
https://github.com/forkcms/forkcms
5
https://github.com/cloudflare/cfrpki
5
https://github.com/yiisoft/yii2
5
https://github.com/n8n-io/n8n
5
https://github.com/answerdev/answer
5
https://github.com/BlackFan/client-side-prototype-pollution
5
https://github.com/apache/geode
5