CVE-2025-31827: Vlad.olaru Fonto

Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vlad.olaru Fonto fonto allows Path Traversal.This issue affects Fonto: from n/a through <= 1.2.2.

Affected products

• Vlad.olaru Fonto: up to and including 1.2.2

Published 2025-04-03. Last modified 2026-06-17.