LuaRocks.org had a security incident in September 2026. Read the incident report.

luasec-scanner

Static security scanner for Lua in embedded firmware: finds remote code execution.

$ luarocks install luasec-scanner

luasec finds untrusted data reaching command execution, dynamic code loading and
firmware-specific sinks in Lua code from routers and IoT devices, and reports it
as plain text, JSON, SARIF or HTML with a 0-100 health score.

Versions

0.5.1-12 days ago0 downloads
0.5.0-13 days ago0 downloads
0.4.0-16 days ago0 downloads
0.3.0-16 days ago0 downloads
0.2.0-19 days ago1 download

Dependencies

lua >= 5.3

Manifests