Description
lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | lunasvg | <= 3.0.0 · <= 3.1.0 | — | PYSEC-2025-131 |
High · 7.5
CVE-2024-57722
EUVD-2024-53720GHSA-h996-qwxw-wv3xPYSEC-2025-131
lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.
Published Jan 23, 2025 · Updated Mar 14, 2025 · Assigned by mitre