0.002 Low
EPSS
Percentile
61.0%
webargs uses insecure caching. Parsed JSON body is stored in a short-lived cache that would cause incorrect JSON payloads to be parsed for concurrent requests due to the cache not being thread-safe.
github.com/marshmallow-code/webargs/issues/371