Nice, thank you. My paranoid security-brain can rest a bit easier now.

As far as I can tell from the CVE, this is a bug in the lua garbage collector? Is it only applicable to Redis then? (Sorry to insist, but I would like to have some official statement from Wube devs on this, before I allow myself to install/update any mods.)

Edit: The "attacker needs authenticated ...

A critical vulnerability has been reported in Redis: https://redis.io/blog/security-advisory-cve-2025-49844/. This is a bug in the Lua garbage collector which can be exploited by a malicious Lua script, and may lead to RCE (remote code execution). If the bug exists in the Lua version included in ...