This paper highlights risks associated with unvalidated input in Lua-based applications.
You can download it from the following link: https://packetstormsecurity.com/files/download/126827/lua-vulns-paper.txt
Source: https://packetstormsecurity.com/files/126827/Lua-Web-Application-Security-Vulnerabilities.html