Skip to content
OpenAdvisories

Archive

29 November 2025

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2025-66034 Public exploit

    fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib

    fontTools is a library for manipulating fonts, written in Python. In versions from 4.33.0 to before 4.60.2, the fonttools varLib (or python3 -m fontTools.varLib) script has an arbitrary file write vulnerability that leads to remote code execution when a malic…