com.opensymphony:xwork vulnerabilities (Maven)

2 vulnerabilities.

• com.opensymphony:xwork Maven Apache Struts, Apache Struts: XXE vulnerability in outdated XWork component CVE-2025-68493 Public exploitFix available EPSS 50.4% 8.1 HighJanuary 11, 2026
• com.opensymphony:xwork Maven Improper Input Validation in OpenSymphony XWork CVE-2008-6504 Public exploitFix available EPSS 38.6% 5.0 MediumMarch 23, 2009