PatchTheCVE: luajithttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-25178: LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflowhttps://patchthecve.com/cve/CVE-2024-25178.htmlhttps://patchthecve.com/cve/CVE-2024-25178.htmlWed, 17 Jun 2026 07:15:39 +0000CRITICAL 9.1: LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.CVE-2024-25177: LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatablhttps://patchthecve.com/cve/CVE-2024-25177.htmlhttps://patchthecve.com/cve/CVE-2024-25177.htmlWed, 17 Jun 2026 07:15:39 +0000HIGH 7.5: LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS).CVE-2024-25176: LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum https://patchthecve.com/cve/CVE-2024-25176.htmlhttps://patchthecve.com/cve/CVE-2024-25176.htmlWed, 17 Jun 2026 07:15:38 +0000CRITICAL 9.8: LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c.