Skip to content
OpenAdvisories

Vendor

adamarcanov

1 known vulnerabilities.

Products

compress-fonts 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-110648

    @offactory/compress-fonts before 1.1.1 OS Command Injection via Font File Names

    @offactory/compress-fonts before 1.1.1 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying font files with crafted names. Font paths are interpolated unquoted into a FontForge command run through child_p…

    adamarcanov compress-fonts