Fix CVE-2016-4977

In advisory I believe vulnerable versions should be updated.

• Affected ranges: [2.0.0.RELEASE,2.0.9.RELEASE]

Reason:

According to Patch, vulnerability functions SpelView, render did not exist before 2.0.0.RELEASE, and I have verified that this vulnerability could not be triggered before 2.0.0.RELEASE.