Description
Fides is an open-source privacy engineering platform. From version 2.33.0 to before version 2.84.5, there is a DOM-based XSS vulnerability in fides.js via the fides_description override. This issue has been patched in version 2.84.5.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ethyca | fides | >= 2.33.0, < 2.84.5 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | ethyca-fides | >= 2.33.0, < 2.84.5 | 2.84.5 | GHSA-5qrq-9645-g5g2 |