Skip to content

Fix potential vulnerable cloned function#3697

Open
npt-1707 wants to merge 1 commit intonodemcu:releasefrom
npt-1707:fix_CVE-2022-33099
Open

Fix potential vulnerable cloned function#3697
npt-1707 wants to merge 1 commit intonodemcu:releasefrom
npt-1707:fix_CVE-2022-33099

Conversation

@npt-1707
Copy link

@npt-1707 npt-1707 commented Mar 9, 2026

Description

Our tool identified a potential vulnerability in clone functions in app/lua53/lvm.c and app/lua53/ldebug.c sourced from lua/lua. These issues, originally reported in CVE-2022-33099, were resolved in the repository via this commit lua/lua@42d4058.

This PR applies the corresponding patch to fix the vulnerabilities in this codebase.

Please review at your convenience.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant