CVE-2026-8759 xiandafu beetl SpELFunction SpELFunction.java expression language injection

A vulnerability was identified in xiandafu beetl up to 3.20.2. Affected is an unknown function of the file beetl-classic-integration/beetl-spring-classic/src/main/java/org/beetl/ext/spring/SpELFunction.java of the component SpELFunction. The manipulation leads to improper neutralization of specia...

PT-2026-41572

Name of the Vulnerable Software and Affected Versions xiandafu beetl versions prior to 3.20.3 Description Improper neutralization of special elements in an expression language statement allows for remote exploitation. The issue exists within the SpELFunction component, specifically in an unknown...

com.github.ruanzy:jone (>=1.0.0, <=2.0.5), com.ibeetl:beetl-framework-starter (>=1.1.6.release, <=1.1.12.release) +2 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.7.21)

com.ibeetl:beetl MAVEN version 2.7.21 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.github.ruanzy:jone =1.0.0, =1.1.6.release, =2.9.0, =2.9.10 - com.ibeetl:xlsunit 1.0.6 Source cves: CVE-2023-30331 Source...

com.ibeetl:beetl-framework-starter (>=1.1.1.release, <=1.1.3.release) potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.7.17)

com.ibeetl:beetl MAVEN version 2.7.17 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.ibeetl:beetl-framework-starter =1.1.1.release, =1.1.3.release Source cves: CVE-2023-30331 Source advisory:...

cn.eova:eova (1.6-beta2), com.github.jackpanz:jackpanz-spring-core (>=1.0.0, <=1.0.14) +2 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.7.16)

com.ibeetl:beetl MAVEN version 2.7.16 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - cn.eova:eova 1.6-beta2 - com.github.jackpanz:jackpanz-spring-core =1.0.0, =2.4.7, =3.0.5 - com.ibeetl:beetl-framework-starter...

com.ibeetl:beetl-framework-starter (>=1.1.40.release, <=1.1.44.release), com.ibeetl:beetlsql (>=2.10.13, <=2.10.18) +5 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.7.27)

com.ibeetl:beetl MAVEN version 2.7.27 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.ibeetl:beetl-framework-starter =1.1.40.release, =2.10.13, =1.3.1, =1.4.2, =1.8.0.0, =2.1.4, =2.1.4, =2.1.5 Source cves:...

com.ibeetl:beetl-framework-starter (>=1.1.49.release, <=1.1.51.release), com.ibeetl:beetlsql (>=2.10.22, <=2.10.24) +3 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.8.2)

com.ibeetl:beetl MAVEN version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.ibeetl:beetl-framework-starter =1.1.49.release, =2.10.22, =1.8.8.2, =1.8.8.4 Source cves: CVE-2023-30331 Source advisory:...

com.ibeetl:beetl-framework-starter (>=1.1.29.release, <=1.1.30.release), com.ibeetl:beetlsql (>=2.10.3, <=2.10.7) +5 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.7.25)

com.ibeetl:beetl MAVEN version 2.7.25 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.ibeetl:beetl-framework-starter =1.1.29.release, =2.10.3, =1.3.0, =1.6.0, =2.0, =2.0, =2.0.1 Source cves: CVE-2023-30331...

cn.js.icode:icode_common (6.2), cn.wizzer.app:wk-nb-web-platform (>=5.0.5, <=5.0.6) +4 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.8.1)

com.ibeetl:beetl MAVEN version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - cn.js.icode:icodecommon 6.2 - cn.wizzer.app:wk-nb-web-platform =5.0.5, =1.1.47.release, =2.1.8, =2.1.8, =2.2.1 Source cves:...

com.ibeetl:beetl-framework-starter (1.1.45.release), com.ibeetl:beetlsql (2.10.19) +1 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.7.28)

com.ibeetl:beetl MAVEN version 2.7.28 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.ibeetl:beetl-framework-starter 1.1.45.release - com.ibeetl:beetlsql 2.10.19 - net.ymate.platform:ymate-platform-webmvc...

com.ibeetl:beetl-framework-starter (>=1.1.4.release, <=1.1.5.release) potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.7.20)

com.ibeetl:beetl MAVEN version 2.7.20 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.ibeetl:beetl-framework-starter =1.1.4.release, =1.1.5.release Source cves: CVE-2023-30331 Source advisory:...

com.ibeetl:beetl-framework-starter (>=1.1.58.release, <=1.1.60.release) potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.8.6)

com.ibeetl:beetl MAVEN version 2.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.ibeetl:beetl-framework-starter =1.1.58.release, =1.1.60.release Source cves: CVE-2023-30331 Source advisory:...

com.ibeetl:beetl-framework-starter (1.1.62.release), org.nutz:nutzboot-starter-beetl (2.2.6) +1 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.9.2)

com.ibeetl:beetl MAVEN version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.ibeetl:beetl-framework-starter 1.1.62.release - org.nutz:nutzboot-starter-beetl 2.2.6 - org.nutz:nutzboot-starter-beetlsql...

com.github.liaochong:html2excel (>=1.3.0, <=1.4.1), com.github.liaochong:myexcel (2.0.0) +6 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.9.7)

com.ibeetl:beetl MAVEN version 2.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.github.liaochong:html2excel =1.3.0, =1.r.68.v20190220, =1.r.68.v20190220, =1.r.68.v20190220, =1.r.69.v20220215 -...

com.github.liaochong:html2excel (>=1.2.0, <=1.2.4), com.ibeetl:beetl-framework-starter (>=1.1.69.release, <=1.1.70.release) +5 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.9.6)

com.ibeetl:beetl MAVEN version 2.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.github.liaochong:html2excel =1.2.0, =1.1.69.release, =2.10.41, =1.5.6, =1.8.12.0, =1.8.17.1 - top.bayberry:bayberry-core...