**Description** https://images.chainguard.dev/security/CVE-2019-6706#/ CVE is about 5.3 version stream. 5.3.5 was never packaged in Wolfi, as 5.3 was introduced at 5.3.6. I think it should only say lua5.3, not affected, code not present.