From 6be005061b5cc1ea0c9ac8c6179ff7f2bc88a20f Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Wed, 24 Jun 2026 08:40:22 +0000
Subject: [PATCH 1/2] fix: todolist-goof/todolist-web-struts/pom.xml &
 todolist-goof/pom.xml to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2314720
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2320014
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-8496612
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-30207
---
 todolist-goof/pom.xml                     | 2 +-
 todolist-goof/todolist-web-struts/pom.xml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/todolist-goof/pom.xml b/todolist-goof/pom.xml
index 4df79d1b1b..8c1322d1dd 100644
--- a/todolist-goof/pom.xml
+++ b/todolist-goof/pom.xml
@@ -13,7 +13,7 @@
         <spring.version>3.2.6.RELEASE</spring.version>
         <hibernate.version>4.3.7.Final</hibernate.version>
         <tapestry.version>5.3.8</tapestry.version>
-        <struts2.version>2.3.20</struts2.version>
+        <struts2.version>7.0.0</struts2.version>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     </properties>
 
diff --git a/todolist-goof/todolist-web-struts/pom.xml b/todolist-goof/todolist-web-struts/pom.xml
index e58874f827..f64788a41d 100644
--- a/todolist-goof/todolist-web-struts/pom.xml
+++ b/todolist-goof/todolist-web-struts/pom.xml
@@ -27,7 +27,7 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-core</artifactId>
-            <version>2.7</version>
+            <version>2.12.2</version>
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>

From d68e64ebdadd973526fa63f21480126f10537919 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Wed, 24 Jun 2026 10:08:18 +0000
Subject: [PATCH 2/2] fix: todolist-goof/todolist-web-struts/pom.xml &
 todolist-goof/pom.xml to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2314720
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHELOGGINGLOG4J-2320014
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-8496612
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHESTRUTS-30207