{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.3.9"}],"component":"lunasvg","cve_ids":["CVE-2024-33763"],"ecosystem":"PyPI","epss":0.00744,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGMXC2JCYNX0MPXZ2ZEHYX","modified_at":"2026-05-21T15:00:17.700244823Z","published_at":"2024-05-01T03:15:07.257Z","references":["https://osv.dev/vulnerability/PYSEC-2024-281","https://github.com/keepinggg/poc/tree/main/poc_of_lunasvg"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2024-281","url":"https://osv.dev/vulnerability/PYSEC-2024-281"}],"summary":"lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp."}