org.apache.struts:struts2-rest-plugin vulnerabilities

CVEs whose affected-version data names the org.apache.struts:struts2-rest-plugin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-104713None

today

Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin

Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin. A request body is read into memory without any bound on how much will be accepted, so a single request can cause the server to allocate …

▾ SunlitApache Software Foundation · org.apache.struts:struts2-rest-pluginvia NVD