Webargs Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Webargs Project records in CISA KEV

No Webargs Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Webargs · all components

TI-2020-06443 CVE-2020-7965 · GHSA-fjq3-5pxw-4wj4

LOW 39

flaskparser.py in Webargs 5.x through 5.5.2 doesn't check that the Content-Type header is application/json when receiving JSON input.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00606 Published 2020-01-29 Fixed in 5.5.3, 6.0.0b4 CWE-352

TI-2019-07108 CVE-2019-9710 · GHSA-8554-jxcw-454q

LOW 37

An issue was discovered in webargs before 5.1.3, as used with marshmallow and other products.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01124 Published 2019-03-12 Fixed in 5.1.3 CWE-362