Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Marshmallow Project Component: Marshmallow Clear all filters
TI-2018-12275 CVE-2018-17175 · GHSA-9q2p-fj49-vpxj

In the marshmallow library before 2.15.1 and 3.x before 3.0.0b9 for Python, the schema…

Priority LOW 28

In the marshmallow library before 2.15.1 and 3.x before 3.0.0b9 for Python, the schema "only" option treats an empty list as implying no "only" option, which allows a request that was intended to expose no fields to inst…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01919 Published 2018-09-18 Fixed in 2.15.1, 3.0.0b9 CWE-358