A flaw was found in LemMinX in versions before 0.19.0. Cache poisoning of external schema files due to directory traversal.
eclipse lemminx