{"action":"Upgrade org.apache.struts:struts2-core to 6.8.0 (6.x) or 7.1.1 (7.x) or later.","affected":[{"fixed":"6.8.0","introduced":"6.0.0"},{"fixed":"7.1.1","introduced":"7.0.0"},{"introduced":"2.0.0","last_affected":"2.3.37"},{"introduced":"2.5.0","last_affected":"2.5.33"}],"component":"org.apache.struts:struts2-core","cve_ids":["CVE-2025-64775"],"ecosystem":"Maven","epss":0.0152,"exploited":false,"fixed_versions":["6.8.0","7.1.1"],"ghsa_id":"GHSA-xx7v-hqxh-cjr9","id":"tcs_01M5N9K67CW8Q8GQY9MPF5K144","modified_at":"2025-12-03T14:28:55.895614Z","published_at":"2025-12-01T18:30:38Z","references":["https://osv.dev/vulnerability/GHSA-xx7v-hqxh-cjr9","https://nvd.nist.gov/vuln/detail/CVE-2025-64775","https://cwiki.apache.org/confluence/display/WW/S2-068","https://github.com/apache/struts","http://www.openwall.com/lists/oss-security/2025/12/01/2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-xx7v-hqxh-cjr9","url":"https://osv.dev/vulnerability/GHSA-xx7v-hqxh-cjr9"}],"summary":"Apache Struts is Vulnerable to DoS via File Leak"}