Hello Apache Struts Team.
This Jira is for consideration of an upgrade to the OGNL libraries used in the Struts 2.5.x and 2.6 build lines.
The most recent applicable versions available at this time are 3.1.21 (for 2.5.x) and 3.2.9 (for 2.6). There is an open PR #293 for 2.5.x and PR #294 for 2.6 available.
The regression tests all pass for 2.5.19-snapshot and 2.6 using the versions listed above.