LU
Product
Lua
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 6Low 0
Watch
Add Lua to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-15889 | 9.8 | Jul 21 | Lua 5.4.0 has a getobjname heap-based buffer over-read because youngcollection in lgc.c uses markold for an insufficient number of list members Affected: 5.4.0 |
| CVE-2022-28805 | 9.1 | Apr 8 | singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a… Affected: 5.4.0 before 5.4.5 |
Showing 2