https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 10:43:22 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-185436 EUVD-2026-185436 https://cve.radiocsirt.org/vuln/euvd-2026-185436 https://cve.radiocsirt.org/vuln/fkie_cve-2022-21165 <p>All versions of package font-converter are vulnerable to Arbitrary Command Injection due to missing sanitization of input that potentially flows into the child_process.exec() function.</p> <p>All versions of package font-converter are vulnerable to Arbitrary Command Injection due to missing sanitization of input that potentially flows into the child_process.exec() function.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-21165 https://cve.radiocsirt.org/vuln/ghsa-g2c3-vwff-m3xr <p><strong>Affected:</strong> npm: font-converter</p> <p>### Overview font-converter is a FontForge wrapper that allows conversion between different font formats (TTF, WOFF, OTF)</p> <p>All versions of this package are vulnerable to Arbitrary Command Injection due to missing sanitization of input that potentially flows into the `child_process.exec()` function.</p> <p>### PoC ```js var PUT = require(&#39;font-converter&#39;); var x = &#34;$(touch success);# &#34;; try { new PUT(x, x, x, x); } catch (e) { console.log(e); } ```</p> <p><strong>Affected:</strong> npm: font-converter</p> <p>### Overview font-converter is a FontForge wrapper that allows conversion between different font formats (TTF, WOFF, OTF)</p> <p>All versions of this package are vulnerable to Arbitrary Command Injection due to missing sanitization of input that potentially flows into the `child_process.exec()` function.</p> <p>### PoC ```js var PUT = require(&#39;font-converter&#39;); var x = &#34;$(touch success);# &#34;; try { new PUT(x, x, x, x); } catch (e) { console.log(e); } ```</p> https://cve.radiocsirt.org/vuln/ghsa-g2c3-vwff-m3xr https://cve.radiocsirt.org/vuln/gsd-2022-21165 gsd-2022-21165 https://cve.radiocsirt.org/vuln/gsd-2022-21165