https://community.netapp.com/t5/ONTAP-Rest-API-Discussions/NetApp-OnTap-Python-Library-uses-old-version-of-marshmallow/m-p/152186#M22 <P><SPAN>When installing the netapp-ontap package via pip, it shows a dependency of&nbsp;marshmallow&lt;=3.0.0rc7,&gt;=3.0.0rc5. These version of marshmallow are vulnerable to&nbsp;</SPAN><SPAN>CVE-2018-17175 and thus not allowed within my organization. Why does the library force such an old version (current version is 3.2.2)? Can the OnTap library be updated to support the new version?</SPAN></P> Wed, 04 Jun 2025 12:09:12 GMT jsharpe 2025-06-04T12:09:12Z https://community.netapp.com/t5/ONTAP-Rest-API-Discussions/NetApp-OnTap-Python-Library-uses-old-version-of-marshmallow/m-p/152186#M22 <P><SPAN>When installing the netapp-ontap package via pip, it shows a dependency of&nbsp;marshmallow&lt;=3.0.0rc7,&gt;=3.0.0rc5. These version of marshmallow are vulnerable to&nbsp;</SPAN><SPAN>CVE-2018-17175 and thus not allowed within my organization. Why does the library force such an old version (current version is 3.2.2)? Can the OnTap library be updated to support the new version?</SPAN></P> Wed, 04 Jun 2025 12:09:12 GMT https://community.netapp.com/t5/ONTAP-Rest-API-Discussions/NetApp-OnTap-Python-Library-uses-old-version-of-marshmallow/m-p/152186#M22 jsharpe 2025-06-04T12:09:12Z