HIGH7.5PyPI
PYSEC-2026-1388· CVE-2023-45139, GHSA-6673-4983-2vx5fonttools XML External Entity Injection (XXE) Vulnerability
Modified: 7/7/2026
package
PyPI/fonttools
pkg:pypi/fonttools
MEDIUM6.3PyPI
PYSEC-2026-1389· CVE-2025-66034, GHSA-768j-98cg-p3fvfontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib
Modified: 7/7/2026
HIGH7.5PyPI
GHSA-6673-4983-2vx5· CVE-2023-45139, PYSEC-2026-1388fonttools XML External Entity Injection (XXE) Vulnerability
Modified: 9/10/2026
MEDIUM6.3PyPI
GHSA-768j-98cg-p3fv· CVE-2025-66034, PYSEC-2026-1389fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib
Modified: 9/10/2026