{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.3.9"}],"component":"lunasvg","cve_ids":["CVE-2024-33768"],"ecosystem":"PyPI","epss":0.00847,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGMY0HXFJNGXC5HRFPJ2YA","modified_at":"2026-05-21T15:00:19.286744312Z","published_at":"2024-05-01T03:15:07.463Z","references":["https://osv.dev/vulnerability/PYSEC-2024-285","https://github.com/keepinggg/poc/tree/main/poc_of_lunasvg"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"PYSEC-2024-285","url":"https://osv.dev/vulnerability/PYSEC-2024-285"}],"summary":"lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over."}