Debian/python-marshmallow: medium 5.3
In the marshmallow library before 2.15.1 and 3.x before 3.0.0b9 for Python, the schema "only" option treats an empty list as implying no "only" option, which allows a request that was intended to expo
Action: Upgrade python-marshmallow to 3.0.0b14-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.0b14-1 | - |
Fixed versions
| 3.0.0b14-1 |
Sources
- osv: DEBIAN-CVE-2018-17175#Debian:14/python-marshmallow
- https://security-tracker.debian.org/tracker/CVE-2018-17175
published · modified · JSON