Eclipse Lemminx vulnerabilities

2 vulnerabilities

Known vulnerabilities in Eclipse Lemminx, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2022-0672eclipselemminx+1
EPSS score
0.30%
A flaw was found in LemMinX in versions prior to 0.19.0. Insecure redirect could allow unauthorized access to sensitive information locally if LemMinX is run under a privileged user.6.5CVE-2022-0673eclipselemminx+1
EPSS score
1.02%
A flaw was found in LemMinX in versions prior to 0.19.0. Cache poisoning of external schema files due to directory traversal.