Threats tagged 'brew-esphome-cve-2025-68480'

CVE-2025-68480 is a denial of service vulnerability in Esphome's Marshmallow library affecting the Schema.load function when called with many=True. A moderately sized input can cause excessive CPU consumption, leading to service disruption. Fixed versions 2023.10.0 and 2025.12.1_1 address this issue. A workaround involves validating input type before processing to fail fast.