Fonttools vulnerabilities

Products

• Fonttools 2

Newest

• fonttools fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib CVE-2025-66034 Public exploitFix available 6.3 MediumNovember 29, 2025
• fonttools fonttools XML External Entity Injection (XXE) Vulnerability CVE-2023-45139 Fix available 7.5 HighJanuary 9, 2024