{"id":"CVE-2023-32700","details":"LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.","modified":"2026-03-15T22:48:52.722023Z","published":"2023-05-20T18:15:09.370Z","related":["ALSA-2023:3661","MGASA-2023-0233","SUSE-SU-2023:2284-1","SUSE-SU-2023:2284-2","SUSE-SU-2023:2285-1","SUSE-SU-2023:2287-1","openSUSE-SU-2024:12936-1"],"references":[{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TF6YXUUFRGBIXIIIEV5SGBJXXT2SMUK5/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLY43MIRONJSJVNBDFQHQ26MP3JIOB3H/"},{"type":"ADVISORY","url":"https://tug.org/pipermail/tex-live/2023-May/049188.html"},{"type":"ADVISORY","url":"https://github.com/TeX-Live/texlive-source/releases/tag/build-svn66984"},{"type":"ADVISORY","url":"https://gitlab.lisn.upsaclay.fr/texlive/luatex/-/tags/1.17.0"},{"type":"FIX","url":"https://tug.org/~mseven/luatex.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/tex-live/texlive-source","events":[{"introduced":"0"},{"fixed":"871c7a2856d70e1a9703d1f72f0587b9995dba5f"}]},{"type":"GIT","repo":"https://gitlab.lisn.upsaclay.fr/texlive/luatex","events":[{"introduced":"0"},{"fixed":"b011b313e03b17513a896cd371de3fc664153855"}],"database_specific":{"versions":[{"introduced":"0"},{"fixed":"1.17.0"}]}}],"versions":["1.16.0","beta-0.66.0","build-svn50573","build-svn50687","build-svn50777","build-svn50838","build-svn50882","pretest-build-20190228","pretest-build-20190307","pretest-build-20190312","pretest-build-svn50419","pretest-build-svn50430","r62569","svn50904","svn51092","svn53987","svn54259","svn54337","svn54408","svn54456","svn57874","svn58132","svn58361","svn58431","svn58528","svn58833","svn58837","svn62180","svn62182","svn62297","svn62388","svn62529","svn62544","svn62591","svn62653","svn65870","svn66081","svn66508","svn66539","texlive-2018.0"],"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"1.04"},{"fixed":"1.16.2"}]},{"events":[{"introduced":"2.9.6300"},{"fixed":"23.5"}]},{"events":[{"introduced":"2017"},{"fixed":"2023"}]},{"events":[{"introduced":"0"},{"fixed":"2023"}]},{"events":[{"introduced":"0"},{"fixed":"23.5"}]}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-32700.json","vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["74674775299308944951359458940410945340","73737356824742560255031864249682343397","193315215758865261783516219340436861998","172294632973615104911048680322873047706","208975904301701563835877556034274009549","217538673977392188620408169765842861546","194978981277303026538701414993897901347"]},"id":"CVE-2023-32700-0ea5f77a","deprecated":false,"target":{"file":"texk/web2c/luatexdir/lua/luastuff.c"},"source":"https://github.com/tex-live/texlive-source/commit/871c7a2856d70e1a9703d1f72f0587b9995dba5f","signature_version":"v1","signature_type":"Line"},{"digest":{"length":359,"function_hash":"248088924740084709204622017787952647928"},"id":"CVE-2023-32700-26b6fa8d","deprecated":false,"target":{"function":"setpdforigin","file":"texk/web2c/luatexdir/lua/lpdflib.c"},"source":"https://github.com/tex-live/texlive-source/commit/871c7a2856d70e1a9703d1f72f0587b9995dba5f","signature_version":"v1","signature_type":"Function"},{"digest":{"length":6344,"function_hash":"2585164639801599563429323829379558834"},"id":"CVE-2023-32700-33e6f508","deprecated":false,"target":{"function":"lua_initialize","file":"texk/web2c/luatexdir/lua/luainit.c"},"source":"https://github.com/tex-live/texlive-source/commit/871c7a2856d70e1a9703d1f72f0587b9995dba5f","signature_version":"v1","signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["97274794586920536489107912719409965356","256941159184292614573341768427161573295","122544935803061227695019454296195346469","59797923512949375417576562698379220816"]},"id":"CVE-2023-32700-40fe65ac","deprecated":false,"target":{"file":"texk/web2c/luatexdir/lua/lpdflib.c"},"source":"https://github.com/tex-live/texlive-source/commit/871c7a2856d70e1a9703d1f72f0587b9995dba5f","signature_version":"v1","signature_type":"Line"},{"digest":{"threshold":0.9,"line_hashes":["311619148191636060669904481238593262949","282919702374900494903915075545431856844","227878335713936884909483907993858757232","213468407849710986431871298907867380720","92679413685020440882437511332607607889","168557599828237663054137059577088910017"]},"id":"CVE-2023-32700-41a2f963","deprecated":false,"target":{"file":"texk/web2c/luatexdir/luatex.c"},"source":"https://github.com/tex-live/texlive-source/commit/871c7a2856d70e1a9703d1f72f0587b9995dba5f","signature_version":"v1","signature_type":"Line"},{"digest":{"threshold":0.9,"line_hashes":["203253736303734113769663533974345326060","283850394152576072667203222989510939870","268511357712942162853905400465159001351","118386618813903851380306544425149069590","32772163608815184822996669425519445431"]},"id":"CVE-2023-32700-4b155aea","deprecated":false,"target":{"file":"texk/web2c/luatexdir/luasocket/src/lua_preload.c"},"source":"https://github.com/tex-live/texlive-source/commit/871c7a2856d70e1a9703d1f72f0587b9995dba5f","signature_version":"v1","signature_type":"Line"},{"digest":{"length":75234,"function_hash":"325159360044382740350697623973891680551"},"id":"CVE-2023-32700-6003e7cc","deprecated":false,"target":{"function":"load_luatex_core_lua","file":"texk/web2c/luatexdir/lua/luatex-core.c"},"source":"https://github.com/tex-live/texlive-source/commit/871c7a2856d70e1a9703d1f72f0587b9995dba5f","signature_version":"v1","signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["57598613735005939807834066027876081561","241325910761621372992837577587401492461","52524693177018570101324431379506058618","237928726110346273106979691261082757978","227284613680896978327076545494896198326","196734188251609218445603492013926968302","27349051689045465278313759939078004740","126095686181161178606835080228140858944","277347690318232361738012719461103302629","166670999908552381756304009651113646482","1416169801685795116227799223656311999","245084466529479110402608581746556127082","141878985956049377995127785972516668867","315775482349661121801972468938561899591","323499810645840783805524603455707735843","142528565873271373458585935721648918697","323606115352496213529376733057034461201","330374279468521708914115126273183130198","241695379832603887107844424514609800824","209774109740031822503591896509720944351","216592230545305835897709591190382313386","335198199590984895885176647370483962504","126113724263973916542023290753510404189","18663923219096304916806533604027427067","98139158973895775574791900724735695625","292599347009796635285662912173653845383","39851069299650429294193303040902325974","182171090844648279166442191719827166996","326952905769661005158101723622537326885","21664250379341794433233752125330159317","112682923267634731153035821012530361355","59147037418607425793429892532722560105","274686088856934479383006278667367865704","146725680258893099010206569237138684040","316827208815520493541694771959677249113"]},"id":"CVE-2023-32700-65814cd4","deprecated":false,"target":{"file":"texk/web2c/luatexdir/lua/luainit.c"},"source":"https://github.com/tex-live/texlive-source/commit/871c7a2856d70e1a9703d1f72f0587b9995dba5f","signature_version":"v1","signature_type":"Line"},{"digest":{"length":436,"function_hash":"231544100686731127966225163169810326683"},"id":"CVE-2023-32700-6dc6f0b7","deprecated":false,"target":{"function":"set_luaname","file":"texk/web2c/luatexdir/lua/llualib.c"},"source":"https://github.com/tex-live/texlive-source/commit/871c7a2856d70e1a9703d1f72f0587b9995dba5f","signature_version":"v1","signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["322534864525164052236211094888663030188","56288331159431421091887280779504058250","325543811065416568420369771110799100088","79642810051291118424231819491275110110","5870043888475526496020650869957752671"]},"id":"CVE-2023-32700-74ce777f","deprecated":false,"target":{"file":"texk/web2c/luatexdir/lua/loslibext.c"},"source":"https://github.com/tex-live/texlive-source/commit/871c7a2856d70e1a9703d1f72f0587b9995dba5f","signature_version":"v1","signature_type":"Line"},{"digest":{"length":4558,"function_hash":"192491516055234077093645990732823450148"},"id":"CVE-2023-32700-7d1f2e76","deprecated":false,"target":{"function":"handle_pfminfo","file":"texk/web2c/luatexdir/luafontloader/src/luafflib.c"},"source":"https://github.com/tex-live/texlive-source/commit/871c7a2856d70e1a9703d1f72f0587b9995dba5f","signature_version":"v1","signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["105786062094559744267186828091816090452","160432779961805298759971894974184455398","35513276924463907789770443303127812672","154928162891706705126620414287211481258"]},"id":"CVE-2023-32700-8aae8105","deprecated":false,"target":{"file":"texk/web2c/luatexdir/lua/luatex-api.h"},"source":"https://github.com/tex-live/texlive-source/commit/871c7a2856d70e1a9703d1f72f0587b9995dba5f","signature_version":"v1","signature_type":"Line"},{"digest":{"length":6988,"function_hash":"235984717368806996807164314373450047964"},"id":"CVE-2023-32700-a69f1dc1","deprecated":false,"target":{"function":"parse_options","file":"texk/web2c/luatexdir/lua/luainit.c"},"source":"https://github.com/tex-live/texlive-source/commit/871c7a2856d70e1a9703d1f72f0587b9995dba5f","signature_version":"v1","signature_type":"Function"},{"digest":{"length":2164,"function_hash":"185226256726092347535532815853322376968"},"id":"CVE-2023-32700-a83160b2","deprecated":false,"target":{"function":"luainterpreter","file":"texk/web2c/luatexdir/lua/luastuff.c"},"source":"https://github.com/tex-live/texlive-source/commit/871c7a2856d70e1a9703d1f72f0587b9995dba5f","signature_version":"v1","signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["47349728606418312126135521880073077943","191896796757072649239083229689661357223","23985890747686855227692161111548728833","109790071250113312459474385104172423080"]},"id":"CVE-2023-32700-bb6b0f28","deprecated":false,"target":{"file":"texk/web2c/luatexdir/luafontloader/src/luafflib.c"},"source":"https://github.com/tex-live/texlive-source/commit/871c7a2856d70e1a9703d1f72f0587b9995dba5f","signature_version":"v1","signature_type":"Line"},{"digest":{"threshold":0.9,"line_hashes":["161440232741559108669184490796815098701","104809146912578881696731524410997005338","138967802172940985144338134765188878985","102699971774649636911244871430650094177","263955363221739922207021206348123854438","59827377220263715773269269987505949473","304029412362290377968874941869650189157","254567898404482330658025129498689780583","62339661863823204757048872518425395218","154807575187493672488883230907927648436","16301111012748001859942170352296902838","171635570264179362133176726185798542394","73396806785451648097867516070421026096","272336525340204243045558930061034813909","66250138378437208651675765275708474784","49841939183561591075169521786127152596","317882299788806184746439866604527074753","300176838362549262959622369416882972979","27329957176657590938240796704783993878","87514967067350841148202679134277502307","214918665082616556202781267070839446325","318824779891578256773646014728777336534","142727534118988531292788722062524581781","204356696662383436049681726787966426279","153349955864883401453929665945363617070","154239526731661520341323233652787505692","165358263162174481797111554075778012054","520415932686008663764103641653557905","152228700113842650070608581415431684512","305308453874033879909172189146290882766","242256930877782132326600426048855642156","94120708458730943379642111171955047612","276118714514300535455197905800780684943","129542189718054846891818819380228739631","248065630287730537216244850075821726931","241627982780148727814997029394240107146","100702007357057963324316968985050542640","296778710700581562365051408855204598011","244785224879774379045323708793484164498","197907948880512457416637108854114987595","205162094537793874758906596933862858169","259046998286177780356320408277228259790","26897589274787722484761576112309420675","291130681442300833202876650006737967776","198558714551372117961631655552486704687","113643575969646559352317938989848595244","114677984613253229775047231017902560159","124956350709470579788746815657348271971","52571685549183213507019863376777807434","126160368623409993701716268413557235430","133773502479354090325072023850607239283","134090305869399584222951201146140582223","46327428323732470531688591779561775425","101075247483247005727709821144956284444","158125165051588714247672940340253308971","29174437523797006636886227133131630937","262640405836089322306151355711820856412","211706462122465851885378433235432756429","40701747577495718198642640485646099071","306531259116885670627102967155378559312","146735327929304922780720519823578430856","210595729465005080438493288861511168293","286037241710535324475502469858729580364","120550973405390136939949898250491215191","170865705907316668055199274705645155676","218504939647311122474743735298174085721","338710804268120139225715478180716988463","163893783778337404941639727504181559338","294880810608078694883907961196237815012","185069256072881931719424707388464754173","134352136462987864834624162279211995341","246043291603464514981455092326363694812","96330055509982781482449473254083895719","257064685935806559995323021175572726325","280113615311949139670480495733862947649","315417942750675666242937741625822827723","319087328825035190356368751680155797270","268912543455415395703481803642679374377","228305203148114150969484430426600998497","41352195591368916992802368340214450210","69635664356422262417449412829388551628","1001423148531661536614217033996610649","313577587403565398937319960895313882982","107257973263852904307624088017910508483","155895414852501798929834472403796753660","148352949968381589622604750480319630483","245776634243498407099925092749114025545","26613898379469714045647026915892323664","16146854931706851354009591800657272206","111627637410955050394071734518715417760","87589599367853156132424952660870437393","200892456113451529881579309891609428583","53286889671279016084841581112467373908","53786756975040451504031061454792493519","339131373716069720974756408146681071994","103242630174468422055732147762846473221","285423629637602121119704172698869439416","134573512389004400042556328090689269183","306760388201807190990930570595366028371","200818351466355168303799712404166792016","150584858208897501686457793206508693744","61597258351804348571613082571339136290","67517934253703299335078978759399614124","200884576940523520086851302254938153750","13721898700350831771479966854368610826","226605001759538861214829927461842846925","113397843965821079933999560142969766842","200796826446348508662539223751833374799","317461651073541627026611441340296945273","78036541604076518523632788052553716959","280521511801787665146189460923010149973","308097679571615077508044104217247361945","333519103709362374521862993922343003627","179437697149243879467914755131477574143","151581355974409517597104911224685874329","317006548123876687156739340814786202980","7651577074868102676528948735776242700","335056484015955742771534169601027579263","146796705556622377129392183807276838148","214616916156467412367426198264545350525","48317749593218863638063094492692309979","14510729559383810199311904083617354493","73219311383151547975344772784261658403","320195403052960567998553418716749209525","89372718303040561758230770864173269648","137998453498103827803186540950221513286","3955954987837156254356122598474827877","213553303935618979898686195200371375902","203742418777015159249666888940358902296","296655038536398148713977244493849335690","6189308947457521979285291294753225533","157937725739107115812935968248000306259","149819580366977348560340209266222254851","132201584083025344021046969854307425359","300618547013521588098073538775799292262","282985049950993121019154846527025388513","64168459987292337278686681662594342939","204983513394374432539265642958018163414","64642054658937501177288754803392604160","327555888991357868146033141639732522855","336060104276928629219700160004831448247","230620444804303360660789357464049570334","213832502757323923336766910060655105937","325532209538456510337249471439981340564","136892286412327531496605824526250633877","194631951594919439457821945695109573827","323335819163084434353184751718750087806","215801706524503693917806634498917103237","54644130389713402001632863967070928289","317832747310796522874984051421841449734","246376480532771417544984657423279483675","334577017729519222921801014003758461594","22172647586359973457761669417782211494","293578551216644930852828319270297538876","282252534934780618951035955220370895560","314742826067114405946786023201480298868","254927501203458495513719975003387768907","158086543508895584767672644959376188889","150536706602133658644548442006124185572","221673039432488942318171187908974859771","134602447988639982103630691945398666481","100204873141330934152360874580124307765","56504898665922939889295007631913677751","103320337730193933613099219187594511763","290028887042286591938421811620742117472","144285725634732078622778961017223779389","204898161197793701913508535108220494320","321400152640563822317286272540594694828","103960228981255114202045001896070635880","74293478771240964825951367251549630454","214508791764725238029898258875081787879","64431803149299629761325272317750294327","327504735792980937739402390489434041306","115302800880518308179746720916402552843","234562396960377346151504602958259433377","181338481964376595444448233407597612018","47950936354283022106562346369149792781","313256963576417406400560069673524851329","320567368614576861572861899213838988304","170430389481174648398688515963580856336","311795815303057872253619118461636079172","33267916074966657408005352922063110374","91218283966925011671674828040766227212","118363228875900275678657193184857039403","13863384057278615057495016817494970476","336646630754754172410725406854436916482","42408684065939165633675412167700549295","87246622648651602268988498627191762580","267349371272595206974291060761808601375","313469306393493190900484179690704018734","238864037207497108109330951426437240626","9653767190640556018197370668347947580","253923257299285383123402485632678115043","113474560091668020148892921345588045842","214105755389914036658145801426413546666","187196559214110946947225151941464287804","121917093244275461998997659176175298666","39613466474002335865654294966377558796","150573505711356003187383202789921172194","165343905949522027187324221866910806419","74303128917828287570808477428174248247","73583397928837540213278050383069230821","279141519598825609282988295293001970655","236042169199031220998924101267685009224","53403983479735740409531352743565936825","60425467300573857672728158243849443025","272372452238225000846653377400348788095","97936333682525858200372162587874380355","50398536248400590991369666360350477565","135711282120028920176409724169496101181","54899067157104357831204141137136372359","188042980144783821436674700554151624745","326971726827472701930697998885833750114","26711776676608967979165691104381110589","148654256610771105980979920306485526699","78033032648533649638624495171111214259","159418812971962277046858444654260922798","243944151773264645037656775271985650772","286421858754589814941367341238076071010","111023493791799821598707261434327693588","79532208905242623354635811932281226113","63193856658983369286916084876934447561","266159161814469759477372694560584227782","212409256012302430784597042845680251250","30904265599075659966352135723474014690","192905336170645548503986515623991934064","160174004609319309085866692943849510074","57163441611151709230241924961579150856","33864717780689169136950950232352172035","189937083604945089449346585404189169092","316476949890504168487722474168925524269","21528290594480196171200968434596844450","215174025301529569056027537059871734654","233459812663819658074527800162609988294","55533245192886485130361856801768814555","214634280719030953922838887779917463422","299448873357921664212639101871177372419","338981755941856408875571679865270537416","325570978643038893643034330861674221467","25342180246708403326136784235264760548","129669351186033051814249261036814071184","270459937632846135357510867094227848987","24844898021992983563853247759924704674","132223326675546626647921423472634203411","216209081606606645124782871474730760688","20740640325557629375522351856834197383","255982526454076554103353981708536481160","82853863060532956983286007596485192103","31283178207301664432918206863248683182","207245718831739248178381973330587374911","244212621206910495340002182682727292836","292537673482993801641360936296096865768","300010946034888896502776982637705634098","35282453321730102741863010387016062135","28419740350892375949446663746727323848","33325151264780659520643074838739577925","284490226925491152961796154775450616880","34347261518461687126924289200897497194","165447686560747723275592682861446817656","188434435213087040918484442032898819462","167877502259323982593306997344377022721","88916792350811462734928175594522948785","299401066760130199485569611740031519690","172818306409316318945976337412511119136","3067801347885085744533021083972574970","333171617090419330413602133484716341762","274245750747358550271896716953626933933","230502319612005402597998000313915108319","113677962345288174245843206753249321517","103136992540529363843642261003407953350","90810705472664669179749664162109519098","310336586425879178271062963190603921837","239408810993076124862489601098397179709","117785004633218592178563582268422992155","94184955394284649545269890040745479682","43155450143593410220918039378897268428","68517622094782455855625201204630977710","69570553423287764019042724256650622559","168061000560389355381647641610430567382","144826199709585670616416402874347368206","333778484414755196966295360184558625455","250539873969552179338035922084662299774","253883849543552310682824914318353424199","233729103551790835321002207900141765431","242182125665039070703105328008542987546","80796875684774745873678906962229174231","231344225492437786105002014860341936412","75659503186178576097474131229929538911","288349060979332278904303954402908297882","311953924193220990710695284037274676236","37309963130750714842186245900757484063","164401290300254047690828054462180537018","24843251243865952983205247358287840767","108110486148665876287714766649391642730","228506494352385029854686934288975474880","121869166514448685047938226383052224013","148986563824557454660247394857921223953","208566165695204878857781388764463424400","84076762116287432202173929901306195533","294307688602640092053306595720893793060","196202883510098855856765198021602978098","192759472433745965364761598829019726580","226330586673917334221813456438778518697","216886897668967214908800114180536331505","217526105185665791986095998612610498172","241466112460713843114728872902460373131","272774235788007258556609972280529936221","110793782665967594966553509353018247429","3517313188951551673701254043572610721","335047929317880262050113599992519666518","103736147320715652692684020297261676659","302162693475469996482231076037027615266","334577429310866069152730702206632796671","183429047576171938548316814731757188109","17685417904381730462227834528362127115","29411199900629876781537003912523702312","191154698725748485368337783442729997855","111263721016124246695573273642311209994","296892135531356864824800282262800374090","235754933971422471162693155113041754604","290285810630386807160507446179297173213","102386940216967116284583952765445608950","154911159688272340487221642077203417873","169696040325877980266734430550659549138","240589629957168380387531578945233833775","93273988304265610349961732633988886913","145210822901212511541623363105593169390","241747465098547159857114269302323543179","170302450797427125996451878908114253594","280221579748671657818159583581432862215","323685622560090861739515003294938788449","45977154782638680392246426609677086542","45873162664781519847430049474896065019","216514457825183443494587274621628651220","126372316027222814791405064221991033689","265437554867992724622433280411420691377","6972253029057072366438674058796393818","126445713045797427948960522888736036072","45596174055959124991059249780598369822","87989708283547715230216673349265447680","246913913326881518855148036776746409045","209927547399249381557436471948831523597","29187537945210867285549258001593552814","137425314766361949868754077216645552176","272743156711718684210208524062935928040","215434396386845954555678274814466297223","149854818815567779157109317086957743755","105644700400716963466282415296549230946","152164428722594084534073007152883221604","19985569246322861430465651719825734703","250013831914780423439904692053619009423","10445631121363500151239461247327733581","21282493737770716383681917445270963529","212904677768981542867155377923953091136","245800815277797774295775023299088007178","155139341157073377840046714952384697551","212721897416406713343092096876947927089","330075296219866545128832063660909727405","186919779601608428717045112535335999555","80775277531566716462081854254136839073","20551166378022133792444518347110914356","18294955416244937615517152989907566751","163197578860763527783328764417803290277","135644311424413256881894305840026705455","335065794977709712028364272951452879868","237082142230884371965947963937152152548","336886689296889110921553425324385863862","272701504618309980423885622536053444986","131327127327671160879207009392743016688","139998027832757857343670537274745191912","197765258483423469769273382218032210179","280208896622003012653255226218112616506","94877095563070838829073892212365919130","230786937794473945318425991311627611380","21614149150785514097514718523486593830","40629488470241414887027541447164032076","190928401269518814952655743717263654346","337037706788229819653632563648306531629","608345350022143673419796879221144998","94638788191889190562108311418595055819","94080536712845364169688196799934498048","137423810772859050793650167941286086117","36680723401437984249642212554727747101","103773695330759636145709870392891030325","340189672442944795359868154818931985409","178305290315759275401673198810115222651","327317421611001883575811771484228882118","188367686398916257754186467326352887584","308176133211388899941760109740932811803","81045868169621239491322691391806288499","251431447420064322938054723389405410367","139038246073521872672082268001294078873","323077007110992886629964310718237556872","193849976273284942162019338106690990853","74963910781088382247469840529751113837","189217974844604679130967828013941681300","292902998751894598925876823842915237221","51136048179378211928727236621238317422","98282560820218550845981687501886100669","65437744900304508799035281921692436000","39926584583390634133530405426513149798","91565974421968046350919994222794200588","324914023071419481990881191914780103589","136323358173365477890012629517840694912","41521316612839678118456795106217662758","12848251329922280968203384677122989654","60902204249729118905404199253952797324","28664422240263865498082435471357281025","66636038731759326081957934572309958712","325018287213342046494320549110056123163","273953006877002642292809046358003607087","171355069334427466958391843375266275834","14898973832862090397542132619714697607","209670483685911204626257174539060433794","235578619133152001475173354594139433615","109232292804329161375078479038195358708","23537281997054692410755819622107515473","293816332641231055390238763174415985901","232120042903531616994636936932568959395","187751638663696725158750148695857094679","11347468663034197681122874400942860755","64819454074387203967969146435622403753","191398759401925786109162727123095925687","33216196266303195028089220331490010370","241960115797996635656308185412943366334","30168928721423155924812134517854264740","50999033492779001298283044832407412644","166640487660931123441146510713510288160","150133959530242181511369593876943290713","72889574569488539720440892479601125058","121969725373267128963069877471356149848","184272331801799820299744426304913177959","253681376244690635255641443037068094292","141957120344525086840012917014376778143","69319017917507124503499784803521387578","317730858189921036213024674891696420090","290462057416909263989583750603749384044","51057249349090551085684582057483830994","325954631072440545229085258624473514915","292029718790102626302266299991075164298","185793442169781633839254602724235977897","336137826069421345242939716740785940447","157244447321973379687452327583822974442","171592128564255695884295713574897149181","142009599296883118042804141167542763094","93312813568391172254986313661982450261","246254717020738408244879649887092383026","273814037991762075138018586106979439529","278774674618274371999122376534112810732","128606462593860125497595851514516477837","189396351212360297985719579543905808811","34193396127050192791696413112053865392","21026621203280922087736591432296353485","303496580557856273330397802281197056987","56037507284261450575798220366885529662","215042274303904186813978528668060520285","123412449858947586444368469906072655668","202661164793260075390170571279917206772","20549888769192814969639417247356226164","168807694258200860858995075188787443785","94939578659653836076140203114136791709","245090672493537627569265729027029186447","240876752675946743669645032434053023997","253012621975861009008402265991529537824","82067785085328587849166227779761486925","8658197165606887886378718980840380565","153605574453864091873951346705163450703","319850435900282532002027940914598249644","3145272319469731514765299549156531920","127894933794477114375931455294711645906","307816035217794713123095696858671789501","94698541132198010627873738957843806226","44369810071773322039315852527635004826","140839571246992634744831908372304752668","198081612227640556136550350816456017544","33588832620836851965224530623415215511","182019252222775692360324321393829958906","307476637054385527597840718491183413236","263006637740874922118512049253257259959","306151350034462338951753294907047400191","141672515578904856921800205121469801807","37259653353377748944765136064710883347","60494774537460442084933987921345839178","213943044897693090265097198405933902597","118246707000781895787205410832852106323","68130319246507351969689529265996218762","67600756008503629686753911452083340415","270528990866008679694649823664675575651","228618162047701106184170017802874608700","95851471784310381976937223637614193518","242056754511935458992829478564511289107","219574062261765011247709483847891026355","204687288423641527305015609783375778417","199050619386661801111378955731651319301","246471722194741746807194784238093239561","254284003934733821756920345448735508563","65139234299119299299540722193641491687","248069191068316699953006217837837901048","193890516676213832963300450154142616457","107749530233476505713318107262299573643","318354420550812558646690017321711973414","204992834084440746980031864997770435418","287843293139105135368040670796083365947","102844941498601344001991403120452831283","98675900524818051512047914789191727368","24821587722919711446555717166327776435","280086004305475049213494572024474252321","60543981298672958570826662773127599310","268392583935700375904366852161602672991","29870594647628506272485433374499619524","339737829087326222398854688715473693480","38755427039144152367687283273496491381","173852675202038819750631732049376479353","48023122050633608134524433817350634251","114321777795314011015892562678395465423","181641118494741037788655429449798984331","101998579522206357279965820341014837196","195228021449941029294711607132344206571","95430017997177638155859459186764162518","60285482147692132819107360651596220872","112993490932377304193478557488163443616","185247712200617161575372296140128436707","106993246347573559013196036663758646442","8724192789197611640790104717112976834","319130294539124932625853698273372975237","262039911678213113025298205717377885774","315238037135567280147650735475260595537","267062533509785759981513758306180482398","247909259486214518134379249991884258599","327382520766049170651912385732209416355","97239355236834041244962174945600491804","166562786891943484920139814796357586114","179295242925721407861839684223671867928","86300981343673991431762150641694474242","169254341308891187631884762936785039353","74466139506660666449721427144537144045","77099607059631769867346251421501209407","55944061570767635426196882499111627355","285186953328988133130079661840858630618","262446320019397851738625038492346740237","334520177910014120436716438128247003552","220351820294306066654641346308330225431","239633561358248588040944723793660280092","110064147397594830761590996817435446334","61513888392026186296439593167525195567","169880049517072444627838392969769515530","225473068164590322288995546819772911585","101279298175493136441715128428338114949","7692064066376445485075003736667754000","307490238889442940450564576887561462648","253139490246091900748629460464603993867","146265423098760201190462749901190773377","332026881989572284233819231463970005178","204285059618876973706743903961421908083","47707177036972739173986044728954049344","339254423494298199343979990142571835023","187596156961912307444330151526685053701","248897683657164547698567301254383148941","108950168216065927348206882288100617263","288578627322261211823330874390195418136","302770931943335101396241757984543986129","207683630789898582676318318440560388409","292526198563898286539789311886155126630","201206023066862243186644473020027233318","136769055603582141493690948427951192355","336038727872960860757424815934120777287","15204040241798688119317109751005581382","281025550158047197847615761040319014373","99492964032217608205550896787288177741","11975195115441622460757268756998409814","223543028007064185363238680948347710061","115737939872338738933843972503581095678","279758513838329591344310355596273946295","104992481706298918484348704039166265300","268035392349693514308835480074488536477","134047268715652658562716292905296586277","287687578166010760469095630301480644061","327235468863538890325920556207057664178","331263292157987107313921471633501347675","118149173177517728828004041405291289728","271869611826204605655619219935028371034","54779193089042628376890291294605223345","232531892583177908331382506099307915669","132716737192895200839934980205030939951","20426643454767043498043169190266571197","59635296451787650366309307970241158322","21472177028769775244329657715489213430","155108868284845922681934318966554808797","192274298563733386391039423412928049149","285752302571561148736099028320223063831","106756331003848002786331019715278972608","269124202590880676551922339658593014537","268489741362085378965847200797543103537","218565840972254853279682017457903573231","187962990021323148312324171621597766248","102195144587705376675919091243875426551","170090775791974673941684342290312382027","121002096720024823704623868016391725901","266537855253985370947498545609474684483","110142837116063499733013364050429411698","181989374988091034994368887832183990600","95040264497151550534760075017314659680","237320746598679609039464213415668366781","199812267821989070583421879512893665672","37983314528326637570264693063382853741","200681171888954361706351289788651913540","135860492355210028640641104699844574795","89509083867692174811555444308366378950","325956459256667679708658668730688742595","249661666685610881103269954146960543709","83057394140960970040319679291458948441","232853288696817125323661743684018712850","2433943162669344706090610368464653245","209895778281485441878962098007510161910","275939539349735556986844310731891833934","325342027809439360234712440311283385659","265527082772859658022935986994715582624","70874193255541688375368719208498316670","303522066611869126550566251893657033302","290932021272826825159613297935406121349","14311794720827431056525148181164267159","307748503679749903572005407765792559429","282226923992412709088325733282188992142","150783795690880527911812761357115028242","210163866778814893241436469713811737658","129989902490662055868860837015872038323","35016722926780595740974385871608730930","160050992170964872660130675251143003332","15409037819046124404304124122289525487","305570882428332003246660559336050666396","271320543413294565349542337580036270504","107728234065117284564449762444856764771","187686985957745061986389833174114562881"]},"id":"CVE-2023-32700-d4593c17","deprecated":false,"target":{"file":"texk/web2c/luatexdir/lua/luatex-core.c"},"source":"https://github.com/tex-live/texlive-source/commit/871c7a2856d70e1a9703d1f72f0587b9995dba5f","signature_version":"v1","signature_type":"Line"},{"digest":{"length":263,"function_hash":"140637853789559668555058146416807414676"},"id":"CVE-2023-32700-d4e89c69","deprecated":false,"target":{"function":"get_luaname","file":"texk/web2c/luatexdir/lua/llualib.c"},"source":"https://github.com/tex-live/texlive-source/commit/871c7a2856d70e1a9703d1f72f0587b9995dba5f","signature_version":"v1","signature_type":"Function"},{"digest":{"length":990,"function_hash":"16681626190811723529780564211918638656"},"id":"CVE-2023-32700-eebc13da","deprecated":false,"target":{"function":"open_oslibext","file":"texk/web2c/luatexdir/lua/loslibext.c"},"source":"https://github.com/tex-live/texlive-source/commit/871c7a2856d70e1a9703d1f72f0587b9995dba5f","signature_version":"v1","signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["153814773639425737100129077248287066926","152533946982333911804166255653328899991","118926448258083057612877267029023235955","3240045659590767449348977863279185623","167339570366935762120457785891598975747","102512419065586384544681686475480243907","34466165306386131221703174603045446107","3879603759480090892305221251363427125","206734766138086804496017107631799738127","152980311112777387831197222692915213204","95119271862475590972775370710968839015","11645655293035761076627637807523814714","335350425003307109928157744037656536636","259766289164787400948484278059001678951"]},"id":"CVE-2023-32700-feaee5bd","deprecated":false,"target":{"file":"texk/web2c/luatexdir/lua/llualib.c"},"source":"https://github.com/tex-live/texlive-source/commit/871c7a2856d70e1a9703d1f72f0587b9995dba5f","signature_version":"v1","signature_type":"Line"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}