marshmallow vulnerabilities (PyPI)

2 vulnerabilities.

• marshmallow PyPI Marshmallow has DoS in Schema.load(many) CVE-2025-68480 Fix available 5.3 MediumDecember 22, 2025
• marshmallow PyPI In marshmallow library the schema "only" option treats an empty list as implying no "only" option CVE-2018-17175 Fix available 5.3 MediumSeptember 18, 2018