SUSE CVE-2026-41196

Luanti formerly Minetest is an open source voxel game-creation platform. Starting in version 5.0.0 and prior to version 5.15.2, a malicious mod can trivially escape the sandboxed Lua environment to execute arbitrary code and gain full filesystem access on the user's device. This applies to the...

EUVD-2020-17104

Malware in sbrugna...

EUVD-2024-22514

Malicious code in bioql PyPI...

EUVD-2024-22513

Malicious code in bioql PyPI...

EUVD-2024-22512

Malicious code in bioql PyPI...

CVE-2024-25176 affecting package luajit for versions less than 2.1.0-27

CVE-2024-25176 affecting package luajit for versions less than 2.1.0-27. A patched version of the package is available...

Azure Linux 3.0 Security Update: luajit / sysbench (CVE-2024-25178)

The version of luajit / sysbench installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-25178 advisory. - LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the...

LuaJIT 安全漏洞

LuaJIT is a LuaJIT open source on-the-fly compiler for the Lua language. A security vulnerability exists in LuaJIT 2.1 and earlier versions, which stems from an out-of-bounds read in the stack overflow handler in ljstate.c. The vulnerability is caused by the presence of an out-of-bounds read in t...

PT-2025-28212

Name of the Vulnerable Software and Affected Versions: LuaJIT versions prior to 2.1 Description: The issue is an out-of-bounds read in the stack-overflow handler in lj state.c. Recommendations: For versions prior to 2.1, update to a version that contains a fix for this issue...

PT-2025-28210

Name of the Vulnerable Software and Affected Versions: LuaJIT versions 2.1 and earlier Description: The issue is related to a stack-buffer-overflow in the lj strfmt wfnum function located in lj strfmt num.c. This overflow can potentially lead to exploitation. No information is provided about the...

CVE-2024-25178

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in ljstate.c...

CVE-2024-25177

CVE-2024-25177 affects LuaJIT 2.1 and OpenRusty luajit2 before 20240314, due to an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS). Several advisories (Debian DLA-4283-1, CBL-Mariner, ALAS related entries) indicate patched packages exist and recommend upgrading l...

LuaJIT 安全漏洞

LuaJIT is a LuaJIT open source on-the-fly compiler for the Lua language. A security vulnerability exists in LuaJIT 2.1 and earlier versions, which stems from a stack buffer overflow in the ljstrfmtwfnum function in ljstrfmtnum.c. The vulnerability is caused by a stack buffer overflow in the...

CVE-2024-25178

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in ljstate.c...

CVE-2024-25178

CVE-2024-25178 affects LuaJIT 2.1 and OpenRusty luajit2 up to the affected ranges, with an out-of-bounds read in the stack-overflow handler (lj_state.c). Connected advisories and debian/Mariner/Fedora updates confirm patched versions exist (e.g., Debian 11 buster update to 2.1.0~beta3+dfsg-5.3+de...

USN-4501-1: LuaJIT vulnerability

It was discovered that an out-of-bounds read existed in LuaJIT. An attacker could use this to cause a denial of service application crash or possibly expose sensitive information. CVE-2020-15890...

USN-4501-1 luajit vulnerability

It was discovered that an out-of-bounds read existed in LuaJIT. An attacker could use this to cause a denial of service application crash or possibly expose sensitive information. CVE-2020-15890...

Ubuntu 16.04 LTS : LuaJIT vulnerability (USN-4501-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4501-1 advisory. It was discovered that an out-of-bounds read existed in LuaJIT. An attacker could use this to cause a denial of service application crash or possibly expose...

CVE-2020-15890

LuaJit through 2.1.0-beta3 has an out-of-bounds read because gc handler frame traversal is mishandled...