HIGH7.5
PYSEC-2025-131
Details
lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/lunasvg
Introduced in:
0No fixed version published yet for lunasvg (pip). Pin to a known-safe version or switch to an alternative.