https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:38:13.575920+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-9710 CVE-2019-9710 2026-10-02T10:38:13.578691+00:00

An issue was discovered in webargs before 5.1.3, as used with marshmallow and other products. JSON parsing uses a short-lived cache to store the parsed JSON body. This cache is not thread-safe, meaning that incorrect JSON payloads could have been parsed for concurrent requests.

 https://cve.radiocsirt.org/vuln/ghsa-8554-jxcw-454q GHSA-8554-jxcw-454q — Webargs mishandles concurrent JSON parsing 2026-10-02T10:38:13.578741+00:00

Affected: PyPI: webargs

An issue was discovered in webargs before 5.1.3, as used with marshmallow and other products. JSON parsing uses a short-lived cache to store the parsed JSON body. This cache is not thread-safe, meaning that incorrect JSON payloads could have been parsed for concurrent requests.