CVE-2019-19391CRITICALCVSS 9.1fixed in 2.1.22019-11-29
CVE-2019-19391 [CRITICAL] CWE-843 CVE-2019-19391: In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a typ
In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations, because certain cases involving valid stack levels and > options are mishandled. NOTE: The LuaJIT project owner states that the debug libary is unsafe by definition and that
nvd