fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib
Moderate severity
GitHub Reviewed
Published
Nov 28, 2025
in
fonttools/fonttools
•
Updated Dec 1, 2025
Give feedback on Dependabot alerts