All products

marshmallow

PyPI · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Marshmallow has DoS in Schema.load(many)CVE-2025-68480 · GHSA-428G-F7CQ-PGP5Version ranges need review. marshmallowRed Hat Ansible Automation Platform 2/python-marshmallow PyPIRed Hat Medium Fix reported
In marshmallow library the schema "only" option treats an empty list as implying no "only" optionCVE-2018-17175 · GHSA-9Q2P-FJ49-VPXJVersion ranges need review. marshmallow PyPI Medium Fix reported