Skip to content
OpenAdvisories

Package · Ubuntu

lua50

2 known vulnerabilities.

2 results · Feed

  • Critical 10.0
    CVE-2025-49844 Public exploit EPSS 83%

    Redis Lua Use-After-Free may lead to remote code execution

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code exe…

  • Unscored —

    Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform S…