Known vulnerabilities in fonttools (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:fonttools_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 2
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting fonttools (Ubuntu package) fonttools (Ubuntu package) is affected by 2 known vulnerabilities: 1 high, 1 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118845 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-66034
CWE-22 High
Available
No
4.29.1-2ubuntu0.1~esm1, 4.46.0-1ubuntu0.1~esm1, 4.55.3-2ubuntu0.25.04.1, 4.55.3-2ubuntu0.25.10.1 28.11.2025 SB2025112880
SB2025121314
SB2026012166
and 4 more
#VU86217 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-45139
CWE-611 Medium
No
No
4.29.1-2ubuntu0.1~esm1, 4.46.0-1ubuntu0.1~esm1, 4.55.3-2ubuntu0.25.04.1, 4.55.3-2ubuntu0.25.10.1 07.02.2024 SB2024020731
SB2024020734
SB20240312162
and 2 more