Most recent entries from all

CVE-2019-6706

2026-10-06T00:37:38.783545+00:00

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.

USN-3941-1 — lua5.3 vulnerability

2026-10-06T00:37:38.783672+00:00

Affected: Ubuntu:16.04:LTS: lua5.3, Ubuntu:18.04:LTS: lua5.3

Fady Othman discovered that Lua incorrectly handled certain scripts. An attacker could possibly use this issue to cause a denial of service.