LuaRocks.org had a security incident in September 2026. Read the incident report.

luasec-scanner

Static security scanner for Lua in embedded firmware: finds remote code execution.

$ luarocks install luasec-scanner

luasec finds untrusted data reaching command execution, dynamic code loading and
firmware-specific sinks in Lua code from routers and IoT devices, and reports it
as plain text, JSON, SARIF or HTML with a 0-100 health score.

Versions

0.5.1-116 days ago0 downloads
0.5.0-116 days ago0 downloads
0.4.0-119 days ago0 downloads
0.3.0-119 days ago0 downloads
0.2.0-122 days ago1 download

Dependencies

lua >= 5.3

Manifests