<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: apache-software-foundation-apache-struts</title><description>Every new CVE for apache-software-foundation-apache-struts.</description><link>https://agentprime.io/</link><item><title>CVE-2026-104714: Apache Struts: Shared message formatter exposes date and time values across concurrent requests</title><link>https://agentprime.io/advisories/CVE-2026-104714/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-104714/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 18:36:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-104713: Apache Struts: Unbounded request body read in the REST plugin</title><link>https://agentprime.io/advisories/CVE-2026-104713/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-104713/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 18:36:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-104712: Apache Struts: Disproportionate response size when rendering BigDecimal request parameters</title><link>https://agentprime.io/advisories/CVE-2026-104712/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-104712/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 18:35:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-104711: Apache Struts: OGNL injection in the legacy RESTful action mapper</title><link>https://agentprime.io/advisories/CVE-2026-104711/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-104711/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Oct 2026 18:35:10 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-73632: Apache Struts: Shared serialization state in the JSON plugin</title><link>https://agentprime.io/advisories/CVE-2026-73632/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73632/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 15 Aug 2026 10:38:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73631: Apache Struts: Shared parsing state in the JSON plugin</title><link>https://agentprime.io/advisories/CVE-2026-73631/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73631/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 15 Aug 2026 10:38:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73635: Apache Struts: Unbounded growth of localized-text caches driven by the request locale</title><link>https://agentprime.io/advisories/CVE-2026-73635/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73635/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 15 Aug 2026 10:38:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73634: Apache Struts: Unbounded read of a Content Security Policy violation report</title><link>https://agentprime.io/advisories/CVE-2026-73634/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73634/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 15 Aug 2026 10:37:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73633: Apache Struts: Unbounded read of a JSON request body</title><link>https://agentprime.io/advisories/CVE-2026-73633/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73633/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Aug 2026 13:48:44 GMT</pubDate><category>CVE</category></item></channel></rss>