[GHSA-5ggr-mpgw-3mgx] Improper Input Validation in Apache Struts

[ryanmurf]

Updates

• Affected products

Comments
Struts 1 the groupId was struts from 1.1 to 1.2.9 then was changed to org.apache.struts in >=1.3 to the last release 1.3.10. The artifactId was struts from 1.1 to 1.2.9 and changed to struts-core in >=1.3. This PR adds struts:struts 1.1 to 1.2.9 for affected packages.

[Copilot]

Pull Request Overview

This PR updates the GitHub security advisory GHSA-5ggr-mpgw-3mgx to include additional affected Apache Struts packages. The change addresses a gap in vulnerability coverage by adding the older Struts package coordinates that were used before the groupId and artifactId naming conventions changed.

• Updated the modified timestamp to reflect the advisory changes
• Changed the version range for org.apache.struts:struts-core to start from 1.3.0 instead of 0
• Added a new affected package entry for struts:struts covering versions 1.1 to 1.2.9

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[advisory-database]

Hi @ryanmurf! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!