My understanding is that isn't true. You can sue someone with no expectation that they will be able to pay in order to deflect blame. That's why people sue fo

My understanding is that isn't true. You can sue someone with no expectation that they will be able to pay in order to deflect blame. That's why people sue for $1 or some other symbolic amount. So, in theory, Equifax could sue the Struts developers so that they can say "it wasn't our fault; they didn't keep up their library". I think the license indemnifies the developers (if they can afford to contest the suit) and the circumstance (we used a library long after EoL) would mean they wouldn't win, but they can still spin the whole thing as "our supplier was actually the bad guy".