News · via oss-security
CVE-2026-104712: Apache Struts: Disproportionate response size when rendering BigDecimal request parameters
Posted by Lukasz Lenart on Oct 05 Severity: moderate Affected versions: - Apache Struts 2.5.14 through 2.5.33 - Apache Struts 6.0.0 through 6.11.0 - Apache Struts 7.0.0 through 7.3.0 Description…