fonttools vulnerabilities (PyPI)

2 vulnerabilities.

• fonttools PyPI fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib CVE-2025-66034 Public exploitFix available 6.3 MediumNovember 29, 2025
• fonttools PyPI fonttools XML External Entity Injection (XXE) Vulnerability CVE-2023-45139 Fix available 7.5 HighJanuary 9, 2024