Skip to content
OpenAdvisories

Package · Debian

fonttools

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.3
    CVE-2025-66034 Public exploit

    fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib

    fontTools is a library for manipulating fonts, written in Python. In versions from 4.33.0 to before 4.60.2, the fonttools varLib (or python3 -m fontTools.varLib) script has an arbitrary file write vulnerability that leads to remote code execution when a malic…

    fonttools fonttools fonttools fonttools Debian Ubuntu PyPI
  • High 7.5
    CVE-2023-45139

    fonttools XML External Entity Injection (XXE) Vulnerability

    fontTools is a library for manipulating fonts, written in Python. The subsetting module has a XML External Entity Injection (XXE) vulnerability which allows an attacker to resolve arbitrary entities when a candidate font (OT-SVG fonts), which contains a SVG t…

    fonttools fonttools fonttools fonttools Debian Ubuntu PyPI