rpm package
suse/python-marshmallow&distro=SUSE Linux Enterprise Server 16.0
pkg:rpm/suse/python-marshmallow&distro=SUSE%20Linux%20Enterprise%20Server%2016.0
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-68480 | Med | 5.3 | < 3.20.2-160000.3.1 | 3.20.2-160000.3.1 | Dec 22, 2025 | Marshmallow is a lightweight library for converting complex objects to and from simple Python datatypes. In versions from 3.0.0rc1 to before 3.26.2 and from 4.0.0 to before 4.1.2, Schema.load(data, many=True) is vulnerable to denial of service attacks. A moderately sized request |
- affected < 3.20.2-160000.3.1fixed 3.20.2-160000.3.1
Marshmallow is a lightweight library for converting complex objects to and from simple Python datatypes. In versions from 3.0.0rc1 to before 3.26.2 and from 4.0.0 to before 4.1.2, Schema.load(data, many=True) is vulnerable to denial of service attacks. A moderately sized request