Apache Struts 2.3 End of Life
Support dates and upgrade guidance — rebuilt from live data.
End of Life
Apache Struts 2.3 reached end of life on 14 May 2019. It no longer receives security fixes.
2,644 days without security patches
Recommended action: upgrade to Apache Struts 7. Support timeline
Official dates from the Apache Struts release process.
| Milestone | Date | Status |
|---|---|---|
| Initial release | 8 Dec 2011 | — |
| End of life | 14 May 2019 | 7.2 years ago |
| Latest release | 2.3.37 · 30 Dec 2018 | final |
Where to go from 2.3
Recommended target: Apache Struts 7.
The newest actively supported branch is Apache Struts 7 (latest release 7.3.0).
Frequently asked questions
Is Apache Struts 2.3 still safe to use?
Apache Struts 2.3 reached end of life on 14 May 2019, 2,644 days ago, and is no longer covered by standard support. Running it means no guaranteed security fixes.
Can I still download Apache Struts 2.3?
Yes — the final release (2.3.37) generally remains available from vendor archives and OS package mirrors, but installing it means running software with known, unpatched vulnerabilities.
What should I upgrade Apache Struts 2.3 to?
Upgrade to Apache Struts 7, the newest actively supported branch.