Direct Vulnerabilities

Known vulnerabilities in the mod_lua package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
NULL Pointer Dereference

*
  • M
DEPRECATED (Duplicate): HTTP response splitting

*
  • M
Information Exposure

*
  • M
Buffer Over-read

*
  • M
Improper Null Termination

*
  • M
Out-of-bounds Read

*
  • M
NULL Pointer Dereference

*
  • M
External Control of File Name or Path

*
  • H
CVE-2026-23918

*
  • H
Out-of-bounds Write

*
  • H
Improper Neutralization

<0:2.4.62-7.el9_7.3
  • H
Information Exposure

<0:2.4.62-7.el9_7.3
  • H
Authentication Bypass by Primary Weakness

<0:2.4.62-7.el9_7.3
  • M
Server-Side Request Forgery (SSRF)

*
  • M
Improper Output Neutralization for Logs

<0:2.4.62-4.el9_6.4
  • M
Improper Authentication

<0:2.4.62-4.el9_6.4
  • M
Improper Access Control

<0:2.4.62-4.el9_6.4
  • M
Improper Input Validation

*
  • M
Memory Leak

*
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:2.4.57-11.el9_4.1
  • H
Improper Encoding or Escaping of Output

<0:2.4.57-11.el9_4
  • H
NULL Pointer Dereference

<0:2.4.57-11.el9_4
  • H
Improper Encoding or Escaping of Output

<0:2.4.57-11.el9_4
  • H
Improper Input Validation

<0:2.4.57-11.el9_4
  • H
Improper Encoding or Escaping of Output

<0:2.4.57-11.el9_4
  • M
HTTP Response Splitting

<0:2.4.62-1.el9
  • M
HTTP Request Smuggling

<0:2.4.62-1.el9
  • M
Out-of-bounds Read

<0:2.4.57-8.el9
  • M
HTTP Response Splitting

<0:2.4.57-5.el9
  • H
HTTP Response Splitting

<0:2.4.53-7.el9_1.5
  • M
HTTP Response Splitting

<0:2.4.53-7.el9_1.1
  • M
HTTP Request Smuggling

<0:2.4.53-7.el9_1.1
  • M
Out-of-bounds Write

<0:2.4.53-7.el9_1.1
  • M
HTTP Request Smuggling

<0:2.4.53-7.el9
  • M
Allocation of Resources Without Limits or Throttling

<0:2.4.53-7.el9
  • M
Information Exposure

<0:2.4.53-7.el9
  • M
Allocation of Resources Without Limits or Throttling

<0:2.4.53-7.el9
  • M
Integer Overflow or Wraparound

<0:2.4.53-7.el9
  • M
Integer Overflow or Wraparound

<0:2.4.53-7.el9
  • M
HTTP Request Smuggling

<0:2.4.53-7.el9
  • M
Out-of-bounds Write

<0:2.4.53-7.el9
  • M
Use of Uninitialized Resource

<0:2.4.53-7.el9
  • M
Out-of-bounds Write

<0:2.4.53-7.el9