AIKIDO-2026-10381

TL;DR

Affected versions of this package include several low-impact security vulnerabilities related to handling of malformed or malicious font data. The release further strengthens protections around the stch feature, which was previously affected by an integer overflow vulnerability. It also incorporates multiple fuzzing-driven fixes, addressing edge cases that could lead to crashes or undefined behavior when processing crafted font files. These changes primarily mitigate risks such as out-of-bounds memory access or denial-of-service conditions when parsing untrusted fonts.