In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.
{ "binaries": [ { "binary_name": "libjakarta-el-api-java", "binary_version": "4.0.0-2" } ] }
{ "binaries": [ { "binary_name": "libjakarta-el-api-java", "binary_version": "5.0.1-1" } ] }