144 matches found
Security Bulletin: Vulnerability in marshmallow bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage.
Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage include the marshmallow library, which is affected by a denial of service vulnerability. CVE-2025-68480. Vulnerability Details CVEID:CVE-2025-68480 DESCRIPTION: Marshmallow is a lightweight library for converting complex...
OESA-2026-3037 python-marshmallow security update
A lightweight library for converting complex datatypes to and from native Python datatypes. Security Fixes: Marshmallow is a lightweight library for converting complex objects to and from simple Python datatypes. In versions from 3.0.0rc1 to before 3.26.2 and from 4.0.0 to before 4.1.2,...
Marshmallow has DoS in Schema.load(many)
ImpactSchema.loaddata, many=True is vulnerable to denial of service attacks. A moderately sized request can consume a disproportionate amount of CPU time. Patches4.1.2, 3.26.2 Workaroundspy Fail fastdef loadmanyschema, data, kwargs: if not isinstancedata, list: raise ValidationError'Invalid input...
PYSEC-2026-1605 Marshmallow has DoS in Schema.load(many)
Impact Schema.loaddata, many=True is vulnerable to denial of service attacks. A moderately sized request can consume a disproportionate amount of CPU time. Patches 4.1.2, 3.26.2 Workarounds py Fail fast def loadmanyschema, data, kwargs: if not isinstancedata, list: raise ValidationError'Invalid...
ROOT-APP-PYPI-CVE-2025-68480 CVE-2025-68480 in rootio-marshmallow - Patched by Root
Root has patched CVE-2025-68480 in the rootio-marshmallow package for Root:PyPI. Multiple fixed versions available...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Python marshmallow vulnerabilities (USN-8225-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8225-1 advisory. Jared Deckard discovered that Python marshmallow did not correctly handle hiding certain fields. An...
USN-8225-1: Python marshmallow vulnerabilities
Jared Deckard discovered that Python marshmallow did not correctly handle hiding certain fields. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 18.04 LTS. CVE-2018-17175 It was discovered that Python marshmallow did not efficiently handle...
USN-8225-1 python-marshmallow vulnerabilities
Jared Deckard discovered that Python marshmallow did not correctly handle hiding certain fields. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 18.04 LTS. CVE-2018-17175 It was discovered that Python marshmallow did not efficiently handle...
Malicious code in marshmellow (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 dbf6f50353e6489a831a2575831b93fd5f99a9cbd60cc30260fd13838beda73f Package is a typosquatting or dependency confusion attempt with a low-harm local-only action, like leaving a flag file. --- Category: PROBABLYPENTEST - Package...
SUSE: Security Advisory (SUSE-SU-2026:20130-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2026:0226-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE 16 Security Update : python-marshmallow (openSUSE-SU-2026:20087-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20087-1 advisory. - CVE-2025-68480: Fixed possible DoS when using Schema.loaddata, many=True bsc1255473. Tenable has extracted the preceding description block directly fr...
SUSE SLES15 / openSUSE 15 Security Update : python-marshmallow (SUSE-SU-2026:0226-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:0226-1 advisory. - CVE-2025-68480: Fixed possible DoS when using Schema.loaddata, many=True bsc1255473. Tenable has extracted the preceding...
OPENSUSE-SU-2026:20087-1 Security update for python-marshmallow
This update for python-marshmallow fixes the following issues: - CVE-2025-68480: Fixed possible DoS when using Schema.loaddata, many=True bsc1255473...
SUSE-SU-2026:20130-1 Security update for python-marshmallow
This update for python-marshmallow fixes the following issues: - CVE-2025-68480: Fixed possible DoS when using Schema.loaddata, many=True bsc1255473...
Security update for python-marshmallow
This update for python-marshmallow fixes the following issues: CVE-2025-68480: Fixed possible DoS when using Schema.loaddata, many=True bsc1255473. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively...
SUSE-SU-2026:0226-1 Security update for python-marshmallow
This update for python-marshmallow fixes the following issues: - CVE-2025-68480: Fixed possible DoS when using Schema.loaddata, many=True bsc1255473...
CVE-2017-18654
An issue was discovered on Samsung mobile devices with M6.0 and N7.0, 7.1 software. An unauthenticated attacker can register a new security certificate. The Samsung ID is SVE-2017-9659 September 2017...
python311-marshmallow-3.26.2-1.1 on GA media (moderate)
python311-marshmallow-3.26.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10003-1 Rating: moderate Cross-References: CVE-2025-68480 CVSS scores: CVE-2025-68480 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-68480 SUSE : 6.3...