#lua
-
LuaRocks Breach: an RCE Found a Year Late, Exploited All Summer
A flaw in LuaRocks.org allowed arbitrary code execution on the server via rockspec uploads. It was exploited from July 9 to August 20, 2026; the team revoked every credential and moved to a new server.