PyPI/lunasvg CVE-2024-33763: high 7.5, EPSS 0.74%

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp.

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: PYSEC-2024-281
• https://github.com/keepinggg/poc/tree/main/poc_of_lunasvg

CVE-2024-33763 · published 2024-05-01T03:15:07.257Z · modified 2026-05-21T15:00:17.700244823Z · JSON