Skip to content
OpenAdvisories

Package · Debian

fonttools

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2023-45139

    fonttools XML External Entity Injection (XXE) Vulnerability

    fontTools is a library for manipulating fonts, written in Python. The subsetting module has a XML External Entity Injection (XXE) vulnerability which allows an attacker to resolve arbitrary entities when a candidate font (OT-SVG fonts), which contains a SVG t…

    fonttools fonttools fonttools fonttools Debian Ubuntu PyPI