lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovgsurfacecreate.
"https://github.com/pypa/advisory-database/blob/main/vulns/lunasvg/PYSEC-2025-131.yaml"