https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:50:47 +0000 https://db.gcve.eu/vuln/ghsa-428g-f7cq-pgp5 <p><strong>Affected:</strong> PyPI: marshmallow</p> <p>### Impact</p> <p>`Schema.load(data, many=True)` is vulnerable to denial of service attacks. A moderately sized request can consume a disproportionate amount of CPU time.</p> <p>### Patches</p> <p>4.1.2, 3.26.2</p> <p>### Workarounds</p> <p>```py # Fail fast def load_many(schema, data, **kwargs): if not isinstance(data, list): raise ValidationError([&#39;Invalid input type.&#39;]) return [schema.load(item, **kwargs) for item in data] ```</p> <p><strong>Affected:</strong> PyPI: marshmallow</p> <p>### Impact</p> <p>`Schema.load(data, many=True)` is vulnerable to denial of service attacks. A moderately sized request can consume a disproportionate amount of CPU time.</p> <p>### Patches</p> <p>4.1.2, 3.26.2</p> <p>### Workarounds</p> <p>```py # Fail fast def load_many(schema, data, **kwargs): if not isinstance(data, list): raise ValidationError([&#39;Invalid input type.&#39;]) return [schema.load(item, **kwargs) for item in data] ```</p> https://db.gcve.eu/vuln/ghsa-428g-f7cq-pgp5