| Package | Affected versions | Patched versions |
|---|---|---|
| suricata | < 6.0.13 | 6.0.13 |
In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free