Skip to content
OpenAdvisories

Vendor

ethyca

22 known vulnerabilities.

Products

fides 22
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.0
    CVE-2026-44541

    Fides: DOM-based XSS vulnerability in fides.js via fides_description override

    Fides is an open-source privacy engineering platform. From version 2.33.0 to before version 2.84.5, there is a DOM-based XSS vulnerability in fides.js via the fides_description override. This issue has been patched in version 2.84.5.

    ethyca fides ethyca-fides PyPI
  • High 8.6
    CVE-2025-57817

    Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation

    Fides is an open-source privacy engineering platform. Prior to version 2.69.1, the OAuth client creation and update endpoints of the Fides Webserver API do not properly authorize scope assignment. This allows highly privileged users with `client:create` or `c…

    ethyca fides ethyca-fides PyPI
  • High 8.2
    CVE-2023-48224

    Cryptographically Weak Generation of One-Time Codes for Identity Verification in ethyca-fides

    Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. The Fides Privacy Center allows data subject users to submit privacy and c…

    ethyca fides ethyca-fides PyPI
  • High 8.2
    CVE-2023-46124

    Server-Side Request Forgery Vulnerability in Custom Integration Upload

    Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime environments, and the enforcement of privacy regulations in code. The Fides web application allows a custom integration to be uploaded as a Z…

    ethyca fides ethyca-fides PyPI
  • High 8.8
    CVE-2023-41319

    Remote Code Execution in Custom Integration Upload in Fides

    Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. The Fides webserver API allows custom integrations to be uploaded as a ZIP…

    ethyca fides ethyca-fides PyPI
  • High 7.5
    CVE-2023-36827

    Fides vulnerable to Path Traversal in Webserver API

    Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. A path traversal (directory traversal) vulnerability affects fides version…

    ethyca fides ethyca-fides PyPI