lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over.
mitre·CWE-653·Published 2025-01-23