Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
openresty/lua-nginx-module
master @ bbed32a
119
Fixes
2
CVEs
HIGH
Peak severity
22.5%
Coverage
Highlights
Denial of Service: 75 prior fixes. Scrutinize any change in this area.
src/ngx_http_lua_util.c: most-fixed (24 issues). Treat as high-risk during review.
42 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
HTTP Request Smuggling: Inadequate body handling during specific HTTP verb transitions allows downstream pipeline state corruption, leading to HTTP Request Smuggling. This is exemplified by improper request body truncation/discarding on HEAD requests.
Memory Corruption: Thread bookkeeping state variables and variable value pointers allocated on the Lua stack can be prematurely recycled or freed while Nginx still holds active pointers to them, resulting in severe Use After Free conditions.
HTTP Response Splitting: Unchecked carriage return and line feed characters (CR/LF) in downstream-supplied inputs passed to header mutation functions enable injection of arbitrary headers or malicious request routing.