11 Total advisories
11 Vulnerabilities
0 Malware
Dependency scanning
Check whether struts:struts is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
UNKNOWN
CVE-2012-1007
Withdrawn Advisory: Apache Struts XSS
MEDIUM 6.5
CVE-2025-54656
Apache Struts Extras Before 2 has an Improper Output Neutralization for Logs Vulnerability
HIGH 7.5
CVE-2023-49735
Apache Tiles: Unvalidated input may lead to path traversal and XXE
HIGH 7.5
CVE-2006-1547
Improper Input Validation in Apache Struts
HIGH 7.5
CVE-2023-34396
Apache Struts vulnerable to memory exhaustion
HIGH 8.2
CVE-2016-1182
Improper Input Validation in Apache Struts
HIGH 7.5
CVE-2015-0899
Improper Input Validation in Apache Struts
HIGH 8.1
CVE-2016-1181
Improper Input Validation in Apache Struts
UNKNOWN
CVE-2008-2025
Apache Struts Cross-site Scripting vulnerability
LOW 3.7
CVE-2006-1548
Cross-site scripting in Apache Struts
HIGH 7.3
CVE-2006-1546
Apache Struts vulnerable to Improper Input Validation
Browse more Maven advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes