Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

webargs

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
PyPI

Advisories 2

  • flaskparser.py in Webargs 5.x through 5.5.2 doesn't check that the Content-Type header is application/json when receiving JSON input.

    Affected: from 5.0.0, fixed in 5.5.3; from 6.0.0b1, fixed in 6.0.0b4.

  • An issue was discovered in webargs before 5.1.3, as used with marshmallow and other products.

    Affected: fixed in 5.1.3; fixed in 5.1.3.