{"action":"Upgrade lua5.1 to 5.1.5-7 or later.","affected":[{"fixed":"5.1.5-7","introduced":"0"}],"component":"lua5.1","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["5.1.5-7"],"id":"tcs_01M5NAW9JMTAJM4ACCSEN7Y73X","modified_at":"2026-10-23T15:47:29.892241163Z","published_at":"2014-09-04T17:55:07.763Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2014-5461","https://security-tracker.debian.org/tracker/CVE-2014-5461"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2014-5461#Debian:14/lua5.1","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2014-5461"}],"summary":"Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via a small number of arguments to a func"}