PT-2026-47119 · Julia · Lua Jll

Published 2026-05-26 · Updated 2026-05-26

OSV

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

An issue in the component luaG runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs.

Fix

Related Identifiers

JLSEC-2026-561

Affected Products

Lua Jll

References · 8

• https://osv.dev/vulnerability/JLSEC-2026-561 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHYZOEFDVLVAD6EEP4CDW6DNONIVVHPA · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJNJ66IFDUKWJJZXHGOLRGIA3HWWC36R · Vendor Advisory
• https://github.com/lua/lua/commit/42d40581dd919fb134c07027ca1ce0844c670daf · Note
• https://lua-users.org/lists/lua-l/2022-05/msg00035.html · Note
• https://lua-users.org/lists/lua-l/2022-05/msg00042.html · Note
• https://lua-users.org/lists/lua-l/2022-05/msg00073.html · Note
• https://lua.org/bugs.html#Lua-stack%20overflow%20when%20C%20stack%20overflows%20while%20handling%20an%20error:~:text=Lua-stack%20overflow%20when%20C%20stack%20overflows%20while%20handling%20an%20error · Note