The following bug
http://lua-users.org/lists/lua-l/2012-09/msg00454.html
was reported back in 2012.
Are there any plans to fix it? Is there a good reason for not fixing it? As explained in the original thread, any system that allows users to write custom Lua scripts that get triggered by some events is susceptible to this problem. That's how a colleague of mine rediscovered it.
Cheers,
V.