CVE-2022-0672

Summary: CVE-2022-0672 affects LemMinX versions prior to 0.19.0, with an insecure redirect that could allow unauthorized access to sensitive information locally when LemMinX runs under a privileged user. What’s affected: LemMinX (

CVE-2022-0673

CVE-2022-0673 affects LemMinX versions prior to 0.19.0. The vulnerability is a directory traversal flaw that enables cache poisoning of external schema files. This is documented across multiple sources (Red Hat CVE, GHSA advisory, OSV, CVE listings) with the root cause stated as cache poisoning o...