Report Highlights 12 Critical Open Source Projects Losing Security Support in 2025
A recent report from The New Stack discusses the approaching end-of-life (EOL) of several widely used open-source software (OSS) projects, meaning they will no longer receive security updates or support. According to The New Stack, this transition poses serious risks for organizations relying on outdated software, leaving them vulnerable to cyber threats.
A key example is the Apache Struts framework. A recently identified critical vulnerability (CVE-2024-53677) affects not only the actively supported Struts 6 versions but also the deprecated Struts 2, which is still used by thousands of applications. Without security patches, businesses using Struts 2 face heightened exposure.
To mitigate risks, companies must plan migrations in advance. Some organizations, like HeroDevs, provide long-term support solutions to help businesses secure their systems during the transition. With nearly 150 OSS projects facing EOL in 2025, experts stress the importance of proactive security planning to protect data and infrastructure