Marshmallow Project Marshmallow — known CVE vulnerabilities

Every CVE whose affected-product data names Marshmallow Project Marshmallow, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2018-17175 — CVSS 5.3 (medium): In the marshmallow library before 2.15.1 and 3.x before 3.0.0b9 for Python, the schema "only" option treats an empty list as implying no…