CVE-2024-57722
1 advisory.
PyPI/lunasvg CVE-2024-57722: high 7.5, EPSS 0.46%
lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2025-131
- https://github.com/sammycage/lunasvg/issues/209
- https://github.com/keepinggg/poc/blob/main/poc_of_lunasvg_3.1.0
CVE-2024-57722 · published · modified · JSON