p PatchFirst

PatchFirst · Latest vulnerabilities

python-marshmallow vulnerabilities

Vulnerabilities published for python-marshmallow in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2025-68480

    Medium · CVSS 5.3EPSS 0.3%Fix available

    Marshmallow has DoS in Schema.load(many)

    Marshmallow is a lightweight library for converting complex objects to and from simple Python datatypes. In versions from 3.0.0rc1 to before 3.26.2 and from 4.0.0 to before 4.1.2, Schema.load(data, many=True) is vulnerable to denial of service attacks. A moderately sized request can consume a disproportionate amount of CPU time. This issue has been patched in version 3.26.2 and 4.1.2.

    python-marshmallowOperating systems
    • Update to 3.4.0-1ubuntu0.1~esm1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →