USN-8225-1 python-marshmallow vulnerabilities

Jared Deckard discovered that Python marshmallow did not correctly handle hiding certain fields. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 18.04 LTS. CVE-2018-17175 It was discovered that Python marshmallow did not efficiently handle...

ai-utilities (>=1.0.0 <=1.0.0b3), auto-pr (=1.2.0) +23 more potentially affected by CVE-2025-68480 via marshmallow (>=4.0.0 <=4.1.1)

marshmallow PYPI version =4.0.0, =1.0.0, =3.0.0, =2.3.1, =3.31.0, =1.8.0, =2.0.3, =0.0.1, =1.115.1, =0.0.1, =1.4.5, =6.0.0, =6.25.7 - nvidia-tao-core =6.0.0 and more Source cves: CVE-2025-68480 Source advisory: SNYK:PYTHON-MARSHMALLOW-14550833...

arango-orm (>=0.4.0 <=0.4.2), bg (>=1.2.0 <=1.9.1) +24 more potentially affected by CVE-2018-17175 via marshmallow (>=0.2.1 <=2.15.0)

marshmallow PYPI version =0.2.1, =0.4.0, =1.2.0, =0.0.65.dev0, =0.10.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =6.0.1, =6.1.2 - plume =0.1.0 and more Source cves: CVE-2018-17175 Source advisory: OSV:GHSA-9Q2P-FJ49-VPXJ...

argschema (>=1.16.1 <=1.16.5), aries-cloudagent (>=0.3.3 <=0.5.1) +25 more potentially affected by CVE-2018-17175 via marshmallow (>=3.0.0 <=3.0.0b8)

marshmallow PYPI version =3.0.0, =1.16.1, =0.3.3, =0.0.22, =0.1.1, =0.1.0, =0.0.18, =0.19.0, =0.1.0, =0.3.0, =1.0.0, =0.0.4, =0.1.0, =0.0.1, =0.0.4 and more Source cves: CVE-2018-17175 Source advisory: OSV:GHSA-9Q2P-FJ49-VPXJ...

argschema (>=1.16.1 <=1.16.5), aries-cloudagent (>=0.3.3 <=0.5.1) +25 more potentially affected by CVE-2018-17175 via marshmallow (>=3.0.0 <=3.0.0b8)

marshmallow PYPI version =3.0.0, =1.16.1, =0.3.3, =0.0.22, =0.1.1, =0.1.0, =0.0.18, =0.19.0, =0.1.0, =0.3.0, =1.0.0, =0.0.4, =0.1.0, =0.0.1, =0.0.4 and more Source cves: CVE-2018-17175 Source advisory: OSV:PYSEC-2018-67...

arango-orm (>=0.4.0 <=0.4.2), bg (>=1.2.0 <=1.9.1) +24 more potentially affected by CVE-2018-17175 via marshmallow (>=0.2.1 <=2.15.0)

marshmallow PYPI version =0.2.1, =0.4.0, =1.2.0, =0.0.65.dev0, =0.10.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =6.0.1, =6.1.2 - plume =0.1.0 and more Source cves: CVE-2018-17175 Source advisory: OSV:PYSEC-2018-67...