CVE-2025-68480 | marshmallow up to 3.26.1/4.1.1 amplification (GHSA-428g-f7cq-pgp5)

December 23, 2025 Yanac

A vulnerability marked as problematic has been reported in marshmallow up to 3.26.1/4.1.1. Affected by this issue is some unknown functionality. This manipulation causes asymmetric resource consumption.

The identification of this vulnerability is CVE-2025-68480. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More