| Package | Affected versions | Patched versions |
|---|---|---|
| lua | = 5.3.5 |
Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free