Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:ebuild/dev-lang/lua@5.1.5-r4
purl pkg:ebuild/dev-lang/lua@5.1.5-r4
Next non-vulnerable version 5.1.5-r200
Latest non-vulnerable version 5.4.4-r103
Risk
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-genu-xfqb-ryfk
Aliases:
CVE-2022-28805
Out-of-bounds Read singlevar in lparser.c in Lua through 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.
5.1.5-r200
Affected by 0 other vulnerabilities.
5.2.3
Affected by 0 other vulnerabilities.
5.4.4-r103
Affected by 0 other vulnerabilities.
VCID-sypb-grma-cfhq
Aliases:
CVE-2021-44647
Access of Resource Using Incompatible Type ('Type Confusion') Lua are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service.
5.1.5-r200
Affected by 0 other vulnerabilities.
5.2.3
Affected by 0 other vulnerabilities.
5.4.4-r103
Affected by 0 other vulnerabilities.
VCID-t68p-xm4z-pqe5
Aliases:
CVE-2014-5461
denial of service
5.1.5-r200
Affected by 0 other vulnerabilities.
5.2.3
Affected by 0 other vulnerabilities.
5.4.4-r103
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-t68p-xm4z-pqe5 denial of service CVE-2014-5461

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-04T19:32:38.742583+00:00 Gentoo Importer Affected by VCID-genu-xfqb-ryfk https://security.gentoo.org/glsa/202305-23 38.6.0
2026-06-04T19:32:38.700075+00:00 Gentoo Importer Affected by VCID-sypb-grma-cfhq https://security.gentoo.org/glsa/202305-23 38.6.0
2026-06-04T19:32:38.653967+00:00 Gentoo Importer Affected by VCID-t68p-xm4z-pqe5 https://security.gentoo.org/glsa/202305-23 38.6.0
2026-06-04T19:13:17.061753+00:00 Gentoo Importer Fixing VCID-t68p-xm4z-pqe5 https://security.gentoo.org/glsa/201701-53 38.6.0