News · via oss-security
CVE-2026-104714: Apache Struts: Shared message formatter exposes date and time values across concurrent requests
Posted by Lukasz Lenart on Oct 05 Severity: moderate Affected versions: - Apache Struts 2.0.0 through 2.3.37 - Apache Struts 2.5.0 through 2.5.33 - Apache Struts 6.0.0 through 6.11.0 - Apache Struts…