Launchpad.net

CVE 2024-25081

Splinefont in FontForge through 20230101 allows command injection via crafted filenames.

See the CVE page on Mitre.org for more details.