Apache Struts End of Life - Dates and Lifecycle
Apache Struts is a free, open-source MVC framework for building Java web applications, maintained by the Apache Software Foundation.
Last updated 6 September 2026
9
Versions tracked
4
At EOL
5
Supported
All versions
| Version | Released | Support Status | Latest |
|---|---|---|---|
|
7
|
11 Dec 2024 |
Active
|
7.4.0
17 Sep 2026
|
|
6
|
02 Jun 2022 |
Active
|
6.12.0
17 Sep 2026
|
|
2.5
|
05 May 2016 |
30 Apr 2024
Ended 2 years, 4 months ago
|
2.5.33
05 Dec 2023
|
|
2.3
|
08 Dec 2011 |
14 May 2019
Ended 7 years, 4 months ago
|
2.3.37
30 Dec 2018
|
|
2.2
|
29 Jun 2010 |
End of Life
|
2.2.3.1
05 Sep 2011
|
|
2.1
|
29 Oct 2007 |
End of Life
|
2.1.8.1
11 Nov 2009
|
|
2.0
|
24 Sep 2006 |
End of Life
|
2.0.14
22 Nov 2008
|
|
1.3
|
14 Dec 2005 |
05 Apr 2013
Ended 13 years, 5 months ago
|
1.3.10
07 Dec 2008
|
About Apache Struts
Apache Struts is best known outside the Java community for CVE-2017-5638, a remote code execution vulnerability in its Jakarta Multipart parser that was exploited in the 2017 Equifax data breach, one of the largest corporate data breaches in history. It's a free, open-source MVC framework for building Java web applications, maintained by the Apache Software Foundation since the mid-2000s.
Apache Struts Lifecycle Explained
The Apache Struts team publishes formal, dated end of life announcements for each retired branch, rather than letting versions quietly fade out. For both 2.3.x and 2.5.x, that announcement set a 6-month countdown rather than an immediate cutoff: 2.3.x was announced November 14, 2018 and actually reached end of life May 14, 2019, while 2.5.x was announced October 30, 2023 and reached end of life April 30, 2024. The entire Struts 1.x line was different — announced already end of life outright, effective April 5, 2013, with no wind-down window. Once a branch's EOL date arrives, the project provides no further security patches, bug fixes, or support of any kind.
Frequently Asked Questions
What is Apache Struts?
Apache Struts is an open-source MVC framework for building Java web applications, providing a structured approach to handling requests, form validation, and view rendering.
What is the latest version of Apache Struts?
Struts 7.1.1 is the current latest release, with the 6.x line also still actively maintained in parallel.
Is Struts framework dead?
No, both the 6.x and 7.x lines are actively maintained. Its reputation took a significant hit after the 2017 Equifax breach, and its overall popularity has declined relative to alternatives like Spring, but the project continues to ship updates.
Is Apache Struts still safe to use?
The actively maintained 6.x and 7.x lines receive regular security patches. Older EOL branches, including 2.3.x, which contains the vulnerability behind the Equifax breach, receive no further fixes and should not be run in production without third-party extended support.