I make a case for upgrading to OGNL 3.0.9, for which I hope the following change will be applied
- Upgrade javassist dependency to 3.1.18
The reason is that current version is not only incompatible with Hibernate 4, but also with JDK8. Incompatibility with Hibernate 4 is due to the fact that javassisst groupId unfortunately changed from javassist to org.javassist. Thus you get two javassist jar in your built artifact. Currently, to incorporate Hibernate and other libraries introducing transitive dependencies to newer javassist coordinates and versions, one has to exclude "old" dependency from struts-core:
Should I raise an issue for OGNL, and if yes, where?