Beetl vulnerabilities

2 known vulnerabilities in Beetl from Xiandafu. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  A vulnerability was identified in xiandafu beetl up to 3.20.2.

  CVE-2026-8759May 17, 2026Xiandafu

  A vulnerability was identified in xiandafu beetl up to 3.20.2. Affected is an unknown function of the file beetl-classic-integration/beetl-spring-classic/src/main/java/org/beetl/ext/spring/SpELFunction.java of the component SpELFunction. The manipulation leads

• 9.8 Critical severity

  Beetl: Improper Control of Generation of Code

  CVE-2024-22533Feb 2, 2024XiandafuEPSS 1.03%

  Before Beetl v3.15.12, the rendering template has a server-side template injection (SSTI) vulnerability. When the incoming template is controllable, it will be filtered by the DefaultNativeSecurityManager blacklist. Because blacklist filtering is not strict, t