Home > Guides > Migration Guide > Version Notes 2.3.28.1 |

Apache Struts 2 Documentation
Version Notes 2.3.28.1
Edit Page Browse Space Add Page Add News

These are the notes for the Struts 2.3.28.1 distribution.

For prior notes in this release series, see Version Notes 2.3.28

- If you are a Maven user, you might want to get started using the Maven Archetype.
- Another quick-start entry point is the blank application. Rename and deploy the WAR as a starting point for your own development.
- There is huge number of examples you can also use as a starting point for you application here

Maven Dependency

    <dependency>
      <groupId>org.apache.struts</groupId>
      <artifactId>struts2-core</artifactId>
      <version>2.3.28.1</version>
    </dependency>

You can also use Struts Archetype Catalog like below

Struts Archetype Catalog

    mvn archetype:generate -DarchetypeCatalog=http://struts.apache.org/

Staging Repository

    <repositories>
      <repository>
        <id>apache.nexus</id>
        <name>ASF Nexus Staging</name>
        <url>https://repository.apache.org/content/groups/staging/</url>
      </repository>
    </repositories>

## Internal Changes

- Possible RCE vulnerability in `XSLTResult` was fixed, read more details in S2-031
- Prevents execution of chained expressions based on new `isSequence` flag introduce in appropriated OGNL versions, it's related to S2-032

This release contains fixes related to S2-031 and S2-032 security bulletins, please read them carefully!

### Issue Detail

- JIRA Release Notes 2.3.28

### Issue List

- Struts 2.3.28 DONE
- Struts 2.3.x TODO

### Other resources

- Commit Logs
- Source Code Repository