Maven/org.eclipse.lemminx:lemminx-parent CVE-2022-0672: medium 5.5, EPSS 0.30%

Exposure of Sensitive Information to an Unauthorized Actor in LemMinX

Action: Upgrade org.eclipse.lemminx:lemminx-parent to 0.19.0 or later.

Affected

Fixed versions

Sources

• osv: GHSA-hrxv-694f-22g3
• https://nvd.nist.gov/vuln/detail/CVE-2022-0672
• https://github.com/eclipse/lemminx/pull/1174
• https://github.com/eclipse/lemminx/commit/076b88052c2a63f60a98ef4b45e3e38c217b70ae
• https://github.com/eclipse/lemminx
• https://github.com/eclipse/lemminx/blob/master/CHANGELOG.md#0190-february-14-2022

CVE-2022-0672 · published 2022-02-19T00:01:28Z · modified 2023-11-08T04:07:37.943374Z · JSON