MAL-2025-30108 Malicious code in project-dxgwi-lemon (npm)

The package project-dxgwi-lemon was found to contain malicious code...

Lemon Arbitrary File Upload Vulnerability

lemon is a set of Java language development using open source office OA system . A security vulnerability exists in the com/mossle/cdn/CdnController.java file in lemon version 1.9.0, which stems from the copyMultipartFileToFile method in CdnUtils that only checks the . / substring and fails to...