l
lua
Security Risk Profile
20
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 43 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 8, 1994 to present
43
Total CVEs
9
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
6.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
20/100
low
Severity Distribution
Critical
2High
7Medium
9Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
5
2
Use After Free
3
3
Race Condition
1
4
Null Pointer Dereference
1
5
Integer Underflow
1
Most Affected Products
1. Lua Lua50
2. alpine/prosody26
3. Lua LPeg18
4. Fedoraproject Fedora15
5. alpine/lua5.411
Recent Vulnerabilities
See more →EOL-lua-5.5
unknown
Dec 22, 2025
CVE-2025-26204
EPSS 0%unknown
Mar 9, 2025🔧 No Patch
CVE-2025-26205
EPSS 0%unknown
Mar 9, 2025🔧 No Patch
CVE-2021-45985
CVSS 7.5high
Apr 10, 2023
REDHAT-BUG-2104427
CVSS 4.0medium
Jul 6, 2022🔧 No Patch
CVE-2022-33099
CVSS 7.5high
Jul 1, 2022
REDHAT-BUG-2073884
CVSS 1.0low
Apr 11, 2022🔧 No Patch
CVE-2022-28805
CVSS 9.1critical
Apr 8, 2022
CVE-2021-44964
CVSS 6.3medium
Mar 14, 2022
CVE-2021-44647
CVSS 5.5medium
Jan 11, 2022
Monitor lua in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.