CVE-2018-17175

The CVE-2018-17175 issue affects Python marshmallow versions prior to 2.15.1 and 3.x prior to 3.0.0b9, where the schema option "only" mishandles an empty list, effectively treating it as if no restriction existed and allowing exposure of fields that were intended to be hidden when filtering is dy...