Fonttools

2 CVEs across 1 Fonttools products. Browse Fonttools vulnerabilities, severities, and proof-of-concept exploits.

Fonttools products with known CVEs

ProductCVEs
Fonttools2
Fonttools CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-66034Medium6.32025-11-29fontTools is a library for manipulating fonts, written in Python. In versions from 4.33.0 to before 4.60.2, the fonttools varLib (or python3 -m fontTools.varLi…
CVE-2023-45139High7.52024-01-10fontTools is a library for manipulating fonts, written in Python. The subsetting module has a XML External Entity Injection (XXE) vulnerability which allows an…