In 2024, creative platform Canva reported the discovery of three “CVE’s” (common vulnerabilities and exposures) in font files. The first had the potential to allow fonts to deliver a malicious XML ...