Apache Struts End of Life - Dates and Lifecycle
Apache Struts is a free, open-source MVC framework for building Java web applications, maintained by the Apache Software Foundation.
Last updated 4 August 2026
9
Versions tracked
4
At EOL
5
Supported
All versions
| Version | Released | Support Status | Latest |
|---|---|---|---|
|
7
|
11 Dec 2024 |
Active
|
7.1.1
01 Oct 2025
|
|
6
|
02 Jun 2022 |
Active
|
6.10.0
25 May 2026
|
|
2.5
|
05 May 2016 |
30 Oct 2023
Ended 2 years, 9 months ago
|
2.5.33
05 Dec 2023
|
|
2.3
|
08 Dec 2011 |
12 Sep 2019
Ended 6 years, 10 months ago
|
2.3.37
30 Dec 2018
|
|
2.2
|
29 Jun 2010 |
End of Life
|
2.2.3.1
05 Sep 2011
|
|
2.1
|
29 Oct 2007 |
End of Life
|
2.1.8.1
11 Nov 2009
|
|
2.0
|
24 Sep 2006 |
End of Life
|
2.0.14
22 Nov 2008
|
|
1.3
|
14 Dec 2005 |
05 Apr 2013
Ended 13 years, 3 months ago
|
1.3.10
07 Dec 2008
|
About Apache Struts
Apache Struts is a free, open-source MVC framework for building Java web applications, maintained by the Apache Software Foundation since the mid-2000s. It's best known outside the Java community for CVE-2017-5638, a remote code execution vulnerability in its Jakarta Multipart parser that was exploited in the 2017 Equifax data breach, one of the largest corporate data breaches in history.
Apache Struts Lifecycle Explained
The Apache Struts team publishes formal, dated end of life announcements for each retired branch, rather than letting versions quietly fade out. Struts 2.5.x reached end of life on October 30, 2023, Struts 2.3.x on September 12, 2019, and the entire Struts 1.x line together on April 5, 2013. Once a branch is announced as end of life, the project provides no further security patches, bug fixes, or support of any kind, and the official project position is that HeroDevs is the recommended third-party option for extended security coverage on EOL versions.
Frequently Asked Questions
What is Apache Struts?
Apache Struts is an open-source MVC framework for building Java web applications, providing a structured approach to handling requests, form validation, and view rendering.
What is the latest version of Apache Struts?
Struts 7.1.1 is the current latest release, with the 6.x line also still actively maintained in parallel.
Is Struts framework dead?
No, both the 6.x and 7.x lines are actively maintained. Its reputation took a significant hit after the 2017 Equifax breach, and its overall popularity has declined relative to alternatives like Spring, but the project continues to ship updates.
Is Apache Struts still safe to use?
The actively maintained 6.x and 7.x lines receive regular security patches. Older EOL branches, including 2.3.x, which contains the vulnerability behind the Equifax breach, receive no further fixes and should not be run in production without third-party extended support.