Marshmallow Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Marshmallow Project records in CISA KEV

No Marshmallow Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Marshmallow 1 record LOW

Records

1 record

TI-2018-12275 CVE-2018-17175 · GHSA-9q2p-fj49-vpxj

In the marshmallow library before 2.15.1 and 3.x before 3.0.0b9 for Python, the schema…

LOW 28

In the marshmallow library before 2.15.1 and 3.x before 3.0.0b9 for Python, the schema "only" option treats an empty list as implying no "only" option, which allows a request that was intended to expose no fields to inst…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01919 Published 2018-09-18 Fixed in 2.15.1, 3.0.0b9 CWE-358

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0