PyPI/lunasvg CVE-2024-33768: critical 9.8, EPSS 0.85%

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: PYSEC-2024-285
• https://github.com/keepinggg/poc/tree/main/poc_of_lunasvg

CVE-2024-33768 · published 2024-05-01T03:15:07.463Z · modified 2026-05-21T15:00:19.286744312Z · JSON