fides

6 results · Clear filters · Feed

• High 7.0
  CVE-2026-44541

  Fides: DOM-based XSS vulnerability in fides.js via fides_description override

  Fides is an open-source privacy engineering platform. From version 2.33.0 to before version 2.84.5, there is a DOM-based XSS vulnerability in fides.js via the fides_description override. This issue has been patched in version 2.84.5.

  ethyca fides ethyca-fides PyPI
  Jun 8, 2026
• High 8.6
  CVE-2025-57817

  Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation

  Fides is an open-source privacy engineering platform. Prior to version 2.69.1, the OAuth client creation and update endpoints of the Fides Webserver API do not properly authorize scope assignment. This allows highly privileged users with `client:create` or `c…

  ethyca fides ethyca-fides PyPI
  Sep 8, 2025
• High 8.2
  CVE-2023-48224

  Cryptographically Weak Generation of One-Time Codes for Identity Verification in ethyca-fides

  Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. The Fides Privacy Center allows data subject users to submit privacy and c…

  ethyca fides ethyca-fides PyPI
  Nov 15, 2023
• High 8.2
  CVE-2023-46124

  Server-Side Request Forgery Vulnerability in Custom Integration Upload

  Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime environments, and the enforcement of privacy regulations in code. The Fides web application allows a custom integration to be uploaded as a Z…

  ethyca fides ethyca-fides PyPI
  Oct 24, 2023
• High 8.8
  CVE-2023-41319

  Remote Code Execution in Custom Integration Upload in Fides

  Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. The Fides webserver API allows custom integrations to be uploaded as a ZIP…

  ethyca fides ethyca-fides PyPI
  Sep 6, 2023
• High 7.5
  CVE-2023-36827

  Fides vulnerable to Path Traversal in Webserver API

  Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. A path traversal (directory traversal) vulnerability affects fides version…

  ethyca fides ethyca-fides PyPI
  Jul 5, 2023