{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.3.9"}],"component":"lunasvg","cve_ids":["CVE-2024-33766"],"ecosystem":"PyPI","epss":0.00611,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGMXNXEW16T1X3GHD13398","modified_at":"2026-05-21T15:00:19.266084971Z","published_at":"2024-05-01T03:15:07.370Z","references":["https://osv.dev/vulnerability/PYSEC-2024-283","https://github.com/keepinggg/poc/tree/main/poc_of_lunasvg"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"PYSEC-2024-283","url":"https://osv.dev/vulnerability/PYSEC-2024-283"}],"summary":"lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0."}