LU
Product
Lua-nginx-module
by Openresty · last CVE Apr 22, 2025
2
CVEs
0
On KEV
7.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch

Add Lua-nginx-module to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-36309
5.3
1%
Apr 6
ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header
Affected: before 0.10.16
Showing 1