The author of ttf-parser has stated that the crate is unmaintained and will not receive further fixes (see the referenced issue). Alternative(s) skrifa, an actively maintained TrueType and OpenType font parsing crate, part of the Google Fonts "oxidize" (fontations) project.
Product
crates.io ttf-parser vulnerabilities
1 published CVE affecting crates.io ttf-parser, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 1
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unscored
- 1
- CISA KEV
- 0
Latest crates.io ttf-parser CVEs
Newest publication first
-
Unknown
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.