The Apache Axis team is pleased to announce the release of Apache Axis2/Java 2.0.2.
Apache Axis2 is a web services engine for Java. It serves JSON-RPC and REST (with OpenAPI generation) as well as SOAP and WSDL, runs standalone or inside a servlet container including Spring Boot, and includes an MCP bridge that exposes deployed services as tools for AI agents. Version 2.0.2 is primarily a security hardening release, and all users are encouraged to upgrade. Several defaults changed to refuse what they previously allowed, including decoupled WS-Addressing responses, service selection from the message body and the default admin console credentials. Request body sizes are now bounded across all message builders. Please read the "Upgrading from 2.0.1" section of the release notes before deploying. Release notes: https://axis.apache.org/axis2/java/core/release-notes/2.0.2.html Downloads: https://axis.apache.org/axis2/java/core/download.html Maven artifacts are available from Maven Central under the org.apache.axis2 group id, version 2.0.2. Robert Lazarski on behalf of the Apache Axis PMC
