https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T23:16:01.997079+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-263839 EUVD-2026-263839 2026-10-24T23:16:02.000337+00:00 EUVD-2026-263839 https://cve.radiocsirt.org/vuln/fkie_cve-2024-22533 fkie_cve-2024-22533 2026-10-24T23:16:02.000376+00:00

Before Beetl v3.15.12, the rendering template has a server-side template injection (SSTI) vulnerability. When the incoming template is controllable, it will be filtered by the DefaultNativeSecurityManager blacklist. Because blacklist filtering is not strict, the blacklist can be bypassed, leading to arbitrary code execution.

 https://cve.radiocsirt.org/vuln/ghsa-9gh8-877r-g477 GHSA-9gh8-877r-g477 — Beetl Server-Side Template Injection vulnerability 2026-10-24T23:16:02.000411+00:00

Affected: Maven: com.ibeetl:beetl-core

Before Beetl v3.15.13.RELEASE, the rendering template has a server-side template injection (SSTI) vulnerability. When the incoming template is controllable, it will be filtered by the DefaultNativeSecurityManager blacklist. Because blacklist filtering is not strict, the blacklist can be bypassed, leading to arbitrary code execution.

 https://cve.radiocsirt.org/vuln/gsd-2024-22533 gsd-2024-22533 2026-10-24T23:16:02.000450+00:00 gsd-2024-22533