Apache Struts 6.x — End of Life

Active
1 release in this series0 CVEs

Apache Struts 6.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatusAlert me
6Jun 2, 2022No6.10.0Active

CVEs affecting Apache Struts 6.x (0)

No CVEs tracked for Apache Struts 6.x.

Apache Struts 6.x will reach end of life — migrate to Apache Struts 7.x

Apache Struts 7.x is the next major release. Plan your upgrade before Apache Struts 6.x stops receiving security patches.

See Apache Struts 7.x

Frequently asked questions

Is Apache Struts 6 end of life?

No. Apache Struts 6.x is still supported. It continues to receive security patches and bug fixes.

What CVEs affect Apache Struts 6?

No CVEs are currently tracked for Apache Struts 6.x in our database. This may mean no vulnerabilities have been recorded yet, or the data is still syncing.

What is the latest Apache Struts 6 version?

The latest Apache Struts 6.x patch release is 6.10.0, released on May 25, 2026. Always run the latest patch to benefit from all security fixes.

How to migrate from Apache Struts 6 to Apache Struts 7?

To migrate from Apache Struts 6 to Apache Struts 7: (1) review the official Apache Struts 7 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.

Is it safe to run Apache Struts 6 in production?

Apache Struts 6 is still supported and safe for production use. Ensure you are running the latest patch version (6.10.0) to have all security fixes applied.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA