OSV-2026-666

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/lua/OSV-2026-666.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-666
Published
2026-05-02T00:18:34Z
Modified
2026-09-17T14:29:47Z
Summary
Heap-use-after-free in insertkey
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=508107730

Crash type: Heap-use-after-free READ 1
Crash state:
insertkey
luaH_resize
luaH_newkey
References

Affected packages

OSS-Fuzz / lua

Package

Name
lua
Purl
pkg:generic/lua

Affected ranges

Type
GIT
Repo
https://github.com/ligurio/lunapark
Events
Introduced
46db6980cd776ae513633efbb86eb24a742e8ca2

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific

introduced_range 
"ef74f0558bb913edef85e7a774fada4ecc82247b:6fa4f33f18072155d16b1586765cb64e8d3dcee3"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/lua/OSV-2026-666.yaml"