CyberSecBulletin

Xiandafu vulnerabilities

We track 2 vulnerabilities in Xiandafu products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 17, 2026.

2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score

Latest Xiandafu vulnerabilities

  • 7.3 High severity

    A vulnerability was identified in xiandafu beetl up to 3.20.2.

    CVE-2026-8759Xiandafu

    A vulnerability was identified in xiandafu beetl up to 3.20.2. Affected is an unknown function of the file beetl-classic-integration/beetl-spring-classic/src/main/java/org/beetl/ext/spring/SpELFunction.java of the component SpELFunction. The manipulation leads

  • 9.8 Critical severity

    Beetl: Improper Control of Generation of Code

    CVE-2024-22533XiandafuEPSS 1.03%

    Before Beetl v3.15.12, the rendering template has a server-side template injection (SSTI) vulnerability. When the incoming template is controllable, it will be filtered by the DefaultNativeSecurityManager blacklist. Because blacklist filtering is not strict, t