PT-2018-13935

Name of the Vulnerable Software and Affected Versions marshmallow library versions prior to 2.15.1 marshmallow library versions 3.x prior to 3.0.0b9 Description The issue arises from the schema "only" option in the marshmallow library, where an empty list is treated as if no "only" option was...