CVE-2024-33766

PyPI/lunasvg CVE-2024-33766: medium 5.3, EPSS 0.61%

lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0.

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: PYSEC-2024-283
• https://github.com/keepinggg/poc/tree/main/poc_of_lunasvg

CVE-2024-33766 · published 2024-05-01T03:15:07.370Z · modified 2026-05-21T15:00:19.266084971Z · JSON