Skip to content
OpenAdvisories
Critical · 10.0 CVE-2026-4745 EUVD-2026-14744GHSA-p4qv-w9rr-5cfp

Arbitrary Code Execution via Crafted Bytecode in dendibakh/perf-ninja

Published Mar 24, 2026 · Updated Mar 24, 2026 · Assigned by GovTech CSG

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in dendibakh perf-ninja (labs/misc/pgo/lua modules). This vulnerability is associated with program files ldo.C.

This issue affects perf-ninja.

Affected products

VendorProductAffectedFixed
dendibakh perf-ninja — —

References