[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGGWmaa1yC3tVhpfkpLPCNFP_cuyyFef3Qo1HudwRiRg":3,"g5a-ex:apache\u002Fstruts_extras@*":57,"g5a-family:apache\u002Fstruts_extras":59},{"success":4,"data":5},true,{"product":6,"versions":22,"topVulnerabilitiesByEpss":26,"kevVulnerabilities":34,"seoMetadata":35,"meta":54},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":21},"apache","struts_extras",3,1,0,"2025-07-30",[14,17,19],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"1.1",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"2.0","Struts Extras by Apache is a technology product with 3 tracked versions and 1 known security vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[23,24,25],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},[27],{"cveId":28,"description":29,"publishedDate":12,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":16,"epssScore":33},"CVE-2025-54656","** UNSUPPORTED WHEN ASSIGNED ** Improper Output Neutralization for Logs vulnerability in Apache Struts.\n\nThis issue affects Apache Struts Extras: before 2.\n\nWhen using LookupDispatchAction, in some cases, Struts may print untrusted input to the logs without any filtering. Specially-crafted input may lead to log output where part of the message masquerades as a separate log line, confusing consumers of the logs (either human or automated). \n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.",6.5,"v3.1","Medium",0.00589,[],{"title":36,"metaDescription":37,"keywords":38,"structuredData":39},"Struts Extras by Apache - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Struts Extras by Apache covering 3 versions with 1 tracked vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Struts Extras vulnerabilities, Struts Extras security, Struts Extras CVE, Apache Struts Extras, Struts Extras threat intelligence, Apache security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":40,"@type":41,"name":42,"description":37,"url":43,"manufacturer":44,"applicationCategory":48,"softwareVersion":49,"mainEntity":50},"https:\u002F\u002Fschema.org","SoftwareApplication","Struts Extras","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapache\u002Fstruts_extras",{"@type":45,"name":46,"url":47},"Organization","Apache","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fapache","Security Software","3 versions tracked",{"@type":51,"name":52,"description":53,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Struts Extras Security Vulnerabilities","Security vulnerabilities affecting Struts Extras by Apache",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":55,"apiVersion":56},"2026-10-17T19:17:23.578Z","3.0",{"rows":58,"total":11,"capped":16,"failed":11},[],[]]