mod_lua | Snyk

Direct Vulnerabilities

Known vulnerabilities in the mod_lua package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Incorrect Privilege Assignment	<0:2.4.68-1.amzn2023.0.1
M Buffer Overflow	<0:2.4.68-1.amzn2023.0.1
M Directory Traversal	<0:2.4.68-1.amzn2023.0.1
M Cross-site Scripting (XSS)	<0:2.4.68-1.amzn2023.0.1
M Buffer Underflow	<0:2.4.68-1.amzn2023.0.1
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0:2.4.68-1.amzn2023.0.1
M Out-of-bounds Read	<0:2.4.68-1.amzn2023.0.1
M Out-of-bounds Read	<0:2.4.68-1.amzn2023.0.1
M Buffer Overflow	<0:2.4.68-1.amzn2023.0.1
M Buffer Overflow	<0:2.4.68-1.amzn2023.0.1
M Expired Pointer Dereference	<0:2.4.68-1.amzn2023.0.1
H External Control of File Name or Path	<0:2.4.67-1.amzn2023.0.1
H Buffer Over-read	<0:2.4.67-1.amzn2023.0.1
H CRLF Injection	<0:2.4.67-1.amzn2023.0.1
H Allocation of Resources Without Limits or Throttling	<0:2.4.67-1.amzn2023.0.1
H Information Exposure	<0:2.4.67-1.amzn2023.0.1
H Improper Null Termination	<0:2.4.67-1.amzn2023.0.1
H NULL Pointer Dereference	<0:2.4.67-1.amzn2023.0.1
H Out-of-bounds Read	<0:2.4.67-1.amzn2023.0.1
H NULL Pointer Dereference	<0:2.4.67-1.amzn2023.0.1
H Out-of-bounds Write	<0:2.4.67-1.amzn2023.0.1
H Information Exposure	<0:2.4.66-1.amzn2023.0.1
H Improper Neutralization	<0:2.4.66-1.amzn2023.0.1
H Authentication Bypass by Primary Weakness	<0:2.4.66-1.amzn2023.0.1
M Incorrect Check of Function Return Value	<0:2.4.65-1.amzn2023.0.1
H Memory Leak	<0:2.4.64-1.amzn2023.0.1
H Reachable Assertion	<0:2.4.64-1.amzn2023.0.1
H Improper Output Neutralization for Logs	<0:2.4.64-1.amzn2023.0.1
H HTTP Request Smuggling	<0:2.4.64-1.amzn2023.0.1
H Improper Access Control	<0:2.4.64-1.amzn2023.0.1
H Server-Side Request Forgery (SSRF)	<0:2.4.64-1.amzn2023.0.1
H CRLF Injection	<0:2.4.64-1.amzn2023.0.1
H Exposure of Resource to Wrong Sphere	<0:2.4.62-1.amzn2023
H Inclusion of Functionality from Untrusted Control Sphere	<0:2.4.61-1.amzn2023
H Improper Encoding or Escaping of Output	<0:2.4.61-1.amzn2023
H NULL Pointer Dereference	<0:2.4.61-1.amzn2023
H Improper Encoding or Escaping of Output	<0:2.4.61-1.amzn2023
H Information Exposure	<0:2.4.61-1.amzn2023
H Improper Input Validation	<0:2.4.61-1.amzn2023
H Improper Encoding or Escaping of Output	<0:2.4.61-1.amzn2023
M HTTP Request Smuggling	<0:2.4.59-2.amzn2023
M HTTP Response Splitting	<0:2.4.59-2.amzn2023
H Resource Exhaustion	<0:2.4.58-1.amzn2023
H Resource Exhaustion	<0:2.4.58-1.amzn2023
H Out-of-bounds Read	<0:2.4.58-1.amzn2023
H HTTP Response Splitting	<0:2.4.56-1.amzn2023
H HTTP Response Splitting	<0:2.4.56-1.amzn2023
H HTTP Response Splitting	<0:2.4.55-1.amzn2023
H HTTP Request Smuggling	<0:2.4.55-1.amzn2023
H Out-of-bounds Write	<0:2.4.55-1.amzn2023
H HTTP Request Smuggling	<0:2.4.54-3.amzn2023.0.4
H Information Exposure	<0:2.4.54-3.amzn2023.0.4
H Allocation of Resources Without Limits or Throttling	<0:2.4.54-3.amzn2023.0.4
H Allocation of Resources Without Limits or Throttling	<0:2.4.54-3.amzn2023.0.4
H Integer Overflow or Wraparound	<0:2.4.54-3.amzn2023.0.4
H Integer Overflow or Wraparound	<0:2.4.54-3.amzn2023.0.4
H Out-of-bounds Read	<0:2.4.54-3.amzn2023.0.4
H HTTP Request Smuggling	<0:2.4.54-3.amzn2023.0.4
H Out-of-bounds Write	<0:2.4.54-3.amzn2023.0.4
H Out-of-bounds Write	<0:2.4.54-3.amzn2023.0.4
H HTTP Request Smuggling	<0:2.4.54-3.amzn2023.0.4
H Use of Uninitialized Resource	<0:2.4.54-3.amzn2023.0.4
H Out-of-bounds Write	<0:2.4.54-3.amzn2023.0.4
H Server-Side Request Forgery (SSRF)	<0:2.4.54-3.amzn2023.0.4

Vulnerability

Vulnerable Version

Incorrect Privilege Assignment

<0:2.4.68-1.amzn2023.0.1