PyPI/lunasvg CVE-2024-57723: medium 6.5, EPSS 0.35%
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over.
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2025-132
- https://github.com/sammycage/lunasvg/issues/209
- https://github.com/keepinggg/poc/blob/main/poc_of_lunasvg_3.1.0
CVE-2024-57723 · published · modified · JSON