Not sure how a vulnerability can be in a lua script.
You should might take a look here then.