{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.3.9"}],"component":"lunasvg","cve_ids":["CVE-2024-33767"],"ecosystem":"PyPI","epss":0.00297,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGMXVR0M1RVJDXKPY9AP05","modified_at":"2026-05-21T15:00:19.249373672Z","published_at":"2024-05-01T03:15:07.413Z","references":["https://osv.dev/vulnerability/PYSEC-2024-284","https://github.com/keepinggg/poc/tree/main/poc_of_lunasvg"],"severity":{"label":"medium","score":5},"sources":[{"source":"osv","source_id":"PYSEC-2024-284","url":"https://osv.dev/vulnerability/PYSEC-2024-284"}],"summary":"lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source."}