Vulnerabilities for marshmallow

First version without a known vulnerability: 2.15.1

Details

• GHSA-428g-f7cq-pgp52025-12-22

  Marshmallow has DoS in Schema.load(many)

  Fixed in: 3.26.2, 4.1.2

• GHSA-9q2p-fj49-vpxj2018-10-10

  In marshmallow library the schema "only" option treats an empty list as implying no "only" option

  Fixed in: 2.15.1, 3.0.0b9