singlevar in lparser.c in Lua through 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code. CREATE(Triage):(User=admin) CVE-2022-28805 (https://nvd.nist.gov/vuln/detail/CVE-2022-28805)
