pkg:PyPI/lunasvg

All known vulnerabilities

• CRITICAL9.8CVE-2024-33768lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.
  from 0, <= 2.3.9
• HIGH7.5CVE-2024-57722lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.
  from 0, <= 3.0.0, <= 3.1.0
• HIGH7.5CVE-2024-33763lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp.
  from 0, <= 2.3.9
• MEDIUM6.5lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell
  from 0, <= 3.0.1
• MEDIUM6.5lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell.
  from 0, <= 3.0.0
• MEDIUM6.5lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over.
  from 0, <= 3.0.0
• MEDIUM6.5lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_path_add_path.
  from 0, <= 3.0.0, <= 3.1.0
• MEDIUM6.5lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_blend.
  from 0, <= 3.0.0, <= 3.1.0
• MEDIUM6.5lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blend_transformed_tiled_argb.isra.0.
  from 0, <= 3.0.0, <= 3.1.0
• MEDIUM5.5lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h.
  from 0, <= 2.3.9
• MEDIUM5.3lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0.
  from 0, <= 2.3.9
• MEDIUM5.0lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source.
  from 0, <= 2.3.9