TI-2026-74142 CVE-2026-110648 · GHSA-3jqx-74fv-xh4j
OS command injection in @offactory/compress-fonts via font file names
Priority MEDIUM 41
@offactory/compress-fonts before 1.1.1 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying font files with crafted names.