Apache Struts 1.3.10 About This is a fork of Apache struts 1 which is EOL : https://struts.apache.org/struts1eol-announcement.html The principal effort is to patch against published vulnerabilities. Currently there are the fixed vulnerabilities: CVE-2012-1007 CVE-2014-0114 CVE-2015-0899 CVE-2016-1181 CVE-2016-1182 License The Apache Software License, Version 2.0