StackRadar

CVE-2025-68480

Medium

Advisory

Published 22 Dec 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
48
of 17,781 indexed, latest versions
Container images
47
deployed by those charts
Fix available
1 of 1
affected package

Marshmallow has DoS in Schema.load(many)

Carried by container images the latest versions of 48 of 17,781 indexed charts deploy, on 47 images.

Affected packageAffected versionsFixed inImages
marshmallowpypi3.3.0, 3.9.0, 3.9.1, 3.10.0+15 more3.26.247
OSV records
GHSA-428g-f7cq-pgp5
Also known as
PYSEC-2026-1605

Charts affected

48 by stars
ChartLatestAffected imagesRadar Score
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
marshmallow@3.21.1
3.26.2

Open the chart page →

11,367
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
marshmallow@3.15.0
3.26.2

Open the chart page →

7,705
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
marshmallow@3.22.0
3.26.2

Open the chart page →

5,987
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
marshmallow@3.20.1
3.26.2

Open the chart page →

6,041
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
marshmallow@3.21.2
3.26.2

Open the chart page →

17,404
esphomegeek-cookbookVerified publisher8.4.21 of 1See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
esphome/esphome:1.18.03f51ec10e823
marshmallow@3.10.0
3.26.2

Open the chart page →

3,717
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
flagsmith/flagsmith-api:v2.6.0fd58556339a4
marshmallow@3.9.1
3.26.2

Open the chart page →

6,868
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
marshmallow@3.21.1
3.26.2

Open the chart page →

11,205
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
marshmallow@3.26.1
3.26.2

Open the chart page →

6,374
supersetinseefrlab1.4.01 of 4See more

superset inseefrlab 1.4.0

1 of the 4 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
marshmallow@3.13.0
3.26.2

Open the chart page →

7,129
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
marshmallow@3.20.1
3.26.2

Open the chart page →

11,764
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
marshmallow@3.21.3
3.26.2

Open the chart page →

20,403
streamlit-appstreamlit-appVerified publisher0.2.01 of 1See more

streamlit-app streamlit-app 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
sruthitanneru/pi-sample:ui-lateste565ea454ffd
marshmallow@3.23.1
3.26.2

Open the chart page →

1,696
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
marshmallow@3.23.2
3.26.2

Open the chart page →

6,324
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
marshmallow@3.21.2
3.26.2

Open the chart page →

10,145
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
marshmallow@3.23.1
3.26.2

Open the chart page →

15,371
chat-searchchat-searchVerified publisher0.1.71 of 1See more

chat-search chat-search 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
ghcr.io/hemslo/chat-search:latest39d48995a5bd
marshmallow@3.21.3
3.26.2

Open the chart page →

4,042
csghubcsghubVerified publisher2.4.31 of 34See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
opencsghq/agenticflow:ee-v0.6-52f03fead54db
marshmallow@3.26.1
3.26.2

Open the chart page →

58,897
csgshipcsghubVerified publisher0.4.62 of 10See more

csgship csghub 0.4.6

2 of the 10 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
opencsghq/csgship-agentic:v0.4.02cd29671a03e
marshmallow@3.14.0
3.26.2
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
marshmallow@3.14.0
3.26.2

Open the chart page →

11,335
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
marshmallow@3.20.1
3.26.2

Open the chart page →

6,179
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
marshmallow@3.22.0
3.26.2

Open the chart page →

5,062
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
marshmallow@3.3.0
3.26.2

Open the chart page →

24,335
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
marshmallow@3.26.1
3.26.2

Open the chart page →

19,224
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
marshmallow@3.26.1
3.26.2

Open the chart page →

6,008
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
marshmallow@3.26.1
3.26.2

Open the chart page →

4,647
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
marshmallow@3.20.1
3.26.2

Open the chart page →

25,017
erpnextimprowisedVerified publisher3.3.01 of 3See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
improwised/erpnext-worker:v13.4.197280b55cbd4
marshmallow@3.12.1
3.26.2

Open the chart page →

6,501
guardrails-usvcinfracloud-chartsVerified publisher1.0.11 of 1See more

guardrails-usvc infracloud-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
opea/guardrails-tgi:latestf68bec6a1271
marshmallow@3.24.1
3.26.2

Open the chart page →

5,062
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
marshmallow@3.20.1
3.26.2

Open the chart page →

6,447
lnbitskronkltdVerified publisher0.1.01 of 1See more

lnbits kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:latest26fae6327477
marshmallow@3.20.1
3.26.2

Open the chart page →

1,444
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
marshmallow@3.26.1
3.26.2

Open the chart page →

8,405
lnbitslnbits0.2.11 of 1See more

lnbits lnbits 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
marshmallow@3.19.0
3.26.2

Open the chart page →

1,949
python-api-postgresmiltex0.0.11 of 2See more

python-api-postgres miltex 0.0.1

1 of the 2 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
miltex/python-api:1.0.0dab12a7748d5
marshmallow@3.12.1
3.26.2

Open the chart page →

2,347
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
marshmallow@3.9.0
3.26.2

Open the chart page →

18,023
chatbot-ai-sampleopenshift0.1.61 of 4See more

chatbot-ai-sample openshift 0.1.6

1 of the 4 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
marshmallow@3.21.2
3.26.2

Open the chart page →

18,922
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
marshmallow@3.26.1
3.26.2

Open the chart page →

8,189
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
marshmallow@3.22.0
3.26.2

Open the chart page →

21,211
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
marshmallow@3.21.1
3.26.2

Open the chart page →

7,431
agentdatarss30.1.01 of 1See more

agentdata rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
marshmallow@3.26.1
3.26.2

Open the chart page →

3,512
noderss30.7.21 of 3See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
marshmallow@3.26.1
3.26.2

Open the chart page →

4,718
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
marshmallow@3.20.2
3.26.2

Open the chart page →

10,209
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
opea/retriever-redis:1.0eb746b263705
marshmallow@3.22.0
3.26.2

Open the chart page →

39,090
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
opea/llm-docsum-tgi:1.002f9e8fa5d71
marshmallow@3.22.0
3.26.2

Open the chart page →

28,858
guardrails-usvctest-opea1.0.01 of 1See more

guardrails-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
opea/guardrails-tgi:1.0262c6048aab8
marshmallow@3.22.0
3.26.2

Open the chart page →

5,221
retriever-usvctest-opea1.0.01 of 1See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
opea/retriever-redis:1.0eb746b263705
marshmallow@3.22.0
3.26.2

Open the chart page →

5,198
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
marshmallow@3.22.0
3.26.2

Open the chart page →

5,350
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
marshmallow@3.13.0
3.26.2

Open the chart page →

9,347
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-68480.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
marshmallow@3.19.0
3.26.2

Open the chart page →

7,085

Container images carrying it

47 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
opea/retriever-redis:1.0eb746b263705
marshmallow@3.22.0
3.26.2
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
marshmallow@3.26.1
3.26.2
2
anchore/anchore-engine:v0.10.0bde9eedf639d
marshmallow@3.9.0
3.26.2
1
apache/airflow:2.8.4-python3.964e58748b6b9
marshmallow@3.21.1
3.26.2
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
marshmallow@3.22.0
3.26.2
1
apache/airflow:2.8.1e5560ad0b86e
marshmallow@3.20.2
3.26.2
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
marshmallow@3.13.0
3.26.2
1
apache/superset:4.0.1ab9467fd712c
marshmallow@3.19.0
3.26.2
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
marshmallow@3.26.1
3.26.2
1
baserow/backend:1.31.1e0b3c8130b91
marshmallow@3.21.2
3.26.2
1
baserow/baserow:1.30.1df0c42eb67e8
marshmallow@3.21.2
3.26.2
1
esphome/esphome:1.18.03f51ec10e823
marshmallow@3.10.0
3.26.2
1
esphome/esphome:2024.3.09ab8cc88b28c
marshmallow@3.21.1
3.26.2
1
esphome/esphome:2024.12.2b2c6322700ac
marshmallow@3.23.2
3.26.2
1
esphome/esphome:2025.3.0def8b6e4f517
marshmallow@3.26.1
3.26.2
1
flagsmith/flagsmith-api:v2.6.0fd58556339a4
marshmallow@3.9.1
3.26.2
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
marshmallow@3.20.1
3.26.2
1
homeassistant/home-assistant:2023.12.48d000332b09b
marshmallow@3.20.1
3.26.2
1
improwised/erpnext-worker:v13.4.197280b55cbd4
marshmallow@3.12.1
3.26.2
1
josh5/unmanic:0.2.64d49c4816260
marshmallow@3.13.0
3.26.2
1
langgenius/dify-api:1.0.0066035f93856
marshmallow@3.26.1
3.26.2
1
langgenius/dify-api:0.6.11fca918260dd6
marshmallow@3.21.3
3.26.2
1
lnbitsdocker/lnbits-legend:latest26fae6327477
marshmallow@3.20.1
3.26.2
1
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
marshmallow@3.19.0
3.26.2
1
makersquad/harp-proxy:0.8.1a40dd258c527
marshmallow@3.26.1
3.26.2
1
miltex/python-api:1.0.0dab12a7748d5
marshmallow@3.12.1
3.26.2
1
opea/guardrails-tgi:1.0262c6048aab8
marshmallow@3.22.0
3.26.2
1
opea/guardrails-tgi:latestf68bec6a1271
marshmallow@3.24.1
3.26.2
1
opea/llm-docsum-tgi:1.002f9e8fa5d71
marshmallow@3.22.0
3.26.2
1
opea/web-retriever-chroma:1.0fe08165d7770
marshmallow@3.22.0
3.26.2
1
openbas/caldera-server:5.1.0a277796d9724
marshmallow@3.20.1
3.26.2
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
marshmallow@3.26.1
3.26.2
1
opencsghq/csgship-agentic:v0.4.02cd29671a03e
marshmallow@3.14.0
3.26.2
1
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
marshmallow@3.14.0
3.26.2
1
opendatacube/restcube:latest91870111837c
marshmallow@3.3.0
3.26.2
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
marshmallow@3.26.1
3.26.2
1
redash/redash:25.8.000d813437db5
marshmallow@3.22.0
3.26.2
1
redash/redash:26.3.0c5c9148f5c38
marshmallow@3.22.0
3.26.2
1
sruthitanneru/pi-sample:ui-lateste565ea454ffd
marshmallow@3.23.1
3.26.2
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
marshmallow@3.23.1
3.26.2
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
marshmallow@3.21.1
3.26.2
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
marshmallow@3.20.1
3.26.2
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
marshmallow@3.21.3
3.26.2
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
marshmallow@3.26.1
3.26.2
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
marshmallow@3.15.0
3.26.2
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
marshmallow@3.20.1
3.26.2
1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
marshmallow@3.21.2
3.26.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.