lemon vulnerabilities