Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

lunasvg

12 known vulnerabilities (1 critical, 2 high, 9 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
12 · 1 critical, 2 high, 9 medium
Registry
PyPI

Advisories 12

  • CVE-2024-55456Medium 6.5

    lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell

    Affected: through 3.0.1.

  • CVE-2024-57724Medium 6.5

    lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell.

    Affected: through 3.0.0.

  • CVE-2024-57723Medium 6.5

    lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over.

    Affected: through 3.0.0.

  • lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.

    Affected: through 3.0.0; through 3.1.0.

  • CVE-2024-57721Medium 6.5

    lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_path_add_path.

    Affected: through 3.0.0; through 3.1.0.

  • CVE-2024-57720Medium 6.5

    lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_blend.

    Affected: through 3.0.0; through 3.1.0.

  • CVE-2024-57719Medium 6.5

    lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blend_transformed_tiled_argb.isra.0.

    Affected: through 3.0.0; through 3.1.0.

  • CVE-2024-33768Critical 9.8

    lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.

    Affected: through 2.3.9.

  • CVE-2024-33767Medium 5.0

    lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source.

    Affected: through 2.3.9.

  • CVE-2024-33766Medium 5.3

    lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0.

    Affected: through 2.3.9.

  • CVE-2024-33764Medium 5.5

    lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h.

    Affected: through 2.3.9.

  • lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp.

    Affected: through 2.3.9.