Vulnerabilities for fonttools

First version without a known vulnerability: 2.3

Details

• GHSA-768j-98cg-p3fv2025-12-01

  fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib

  Fixed in: 4.60.2

• GHSA-6673-4983-2vx52024-01-09

  fonttools XML External Entity Injection (XXE) Vulnerability

  Fixed in: 4.43.0