Apache Struts 2.5 End of Life
Support dates and upgrade guidance — rebuilt from live data.
End of Life
Apache Struts 2.5 reached end of life on 30 Apr 2024. It no longer receives security fixes.
831 days without security patches
Recommended action: upgrade to Apache Struts 7. Support timeline
Official dates from the Apache Struts release process.
| Milestone | Date | Status |
|---|---|---|
| Initial release | 5 May 2016 | — |
| End of life | 30 Apr 2024 | 2.3 years ago |
| Latest release | 2.5.33 · 5 Dec 2023 | final |
Where to go from 2.5
Recommended target: Apache Struts 7.
The newest actively supported branch is Apache Struts 7 (latest release 7.3.0).
Frequently asked questions
Is Apache Struts 2.5 still safe to use?
Apache Struts 2.5 reached end of life on 30 Apr 2024, 831 days ago, and is no longer covered by standard support. Running it means no guaranteed security fixes.
Can I still download Apache Struts 2.5?
Yes — the final release (2.5.33) generally remains available from vendor archives and OS package mirrors, but installing it means running software with known, unpatched vulnerabilities.
What should I upgrade Apache Struts 2.5 to?
Upgrade to Apache Struts 7, the newest actively supported branch.