LOWPyPI
GHSA-2h46-8gf5-fmxv· CVE-2024-45052, PYSEC-2026-1331Timing-Based Username Enumeration Vulnerability in Fides Webserver Authentication
Modified: 9/10/2026
package
PyPI/ethyca-fides
pkg:pypi/ethyca-fides
LOW2.7PyPI
GHSA-3rw2-wfc8-wmj5· CVE-2023-37481, PYSEC-2026-1332Fides Webserver Vulnerable to SVG Bomb File Uploads
Modified: 9/10/2026
MEDIUM4.3PyPI
GHSA-3vpf-mcj7-5h38· CVE-2023-47114, PYSEC-2026-1333Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages
Modified: 9/10/2026
MEDIUM5.3PyPI
GHSA-53q7-4874-24qg· CVE-2024-31223, PYSEC-2026-1334Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL
Modified: 9/10/2026
HIGHPyPI
GHSA-5qrq-9645-g5g2· CVE-2026-44541, PYSEC-2026-2470ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override
Modified: 7/13/2026
MEDIUM6.5PyPI
GHSA-7q62-r88r-j5gw· CVE-2025-57815, PYSEC-2026-1335Fides has a Lack of Brute-Force Protections on Authentication Endpoints
Modified: 9/10/2026
HIGH8.2PyPI
GHSA-82vr-5769-6358· CVE-2023-48224, PYSEC-2026-1336Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification
Modified: 9/10/2026
LOW2.3PyPI
GHSA-8cm5-jfj2-26q7· CVE-2024-34715, PYSEC-2026-1337Fides Webserver Logs Hosted Database Password Partial Exposure Vulnerability
Modified: 9/10/2026
CRITICAL9.1PyPI
GHSA-c34r-238x-f7qx· CVE-2024-45053, PYSEC-2026-1338Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine
Modified: 9/10/2026
—0.0PyPI
GHSA-cvw4-c69g-7v7m· CVE-2024-38537, PYSEC-2026-1339Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js
Modified: 9/10/2026
LOW3.9PyPI
GHSA-fgjj-5jmr-gh83· CVE-2023-46126, PYSEC-2026-1340Fides JavaScript Injection Vulnerability in Privacy Center URL
Modified: 9/10/2026
HIGH7.5PyPI
GHSA-fq34-xw6c-fphf· CVE-2025-57816, PYSEC-2026-1341Fides Webserver API Rate Limiting Vulnerability in Proxied Environments
Modified: 9/10/2026
LOW2.7PyPI
GHSA-g95c-2jgm-hqc6· CVE-2023-37480, PYSEC-2026-1342Fides Webserver Vulnerable to Zip Bomb File Uploads
Modified: 9/10/2026
HIGH7.2PyPI
GHSA-hjfh-p8f5-24wr· CVE-2025-57817, PYSEC-2026-1343Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation
Modified: 9/10/2026
HIGH8.2PyPI
GHSA-jq3w-9mgf-43m4· CVE-2023-46124, PYSEC-2026-1344Fides Server-Side Request Forgery Vulnerability in Custom Integration Upload
Modified: 9/10/2026
HIGH8.8PyPI
GHSA-p6p2-qq95-vq5h· CVE-2023-41319, PYSEC-2026-1345Remote Code Execution in Custom Integration Upload
Modified: 9/10/2026
MEDIUMPyPI
GHSA-qx5f-ghc2-7g5c· CVE-2026-42303, PYSEC-2026-2471Ethyca Fides has a Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection
Modified: 7/13/2026
HIGH7.5PyPI
GHSA-r25m-cr6v-p9hq· CVE-2023-36827, PYSEC-2023-107ethyca-fides Webserver API Path Traversal vulnerability
Modified: 9/10/2026
MEDIUM6.5PyPI
GHSA-rcvg-jj3g-rj7c· CVE-2024-35189, PYSEC-2026-1346Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints
Modified: 9/10/2026
MEDIUM6.5PyPI
GHSA-rjxg-rpg3-9r89· CVE-2023-46125, PYSEC-2026-1347Fides Information Disclosure Vulnerability in Config API Endpoint
Modified: 9/10/2026
MEDIUM4.8PyPI
GHSA-rpw8-82v9-3q87· CVE-2025-57766, PYSEC-2026-1348Fides' Admin UI User Password Change Does Not Invalidate Current Session
Modified: 9/10/2026
MEDIUM5.7PyPI
GHSA-v7vm-rhmg-8j2r· CVE-2024-52008, PYSEC-2026-1349Password Policy Bypass Vulnerability in Fides Webserver User Accept Invite API
Modified: 9/10/2026
—PyPI
PYSEC-2023-107· CVE-2023-36827, GHSA-r25m-cr6v-p9hqModified: 11/8/2023
—PyPI
PYSEC-2026-1331· CVE-2024-45052, GHSA-2h46-8gf5-fmxvTiming-Based Username Enumeration Vulnerability in Fides Webserver Authentication
Modified: 7/7/2026
LOW2.7PyPI
PYSEC-2026-1332· CVE-2023-37481, GHSA-3rw2-wfc8-wmj5Fides Webserver Vulnerable to SVG Bomb File Uploads
Modified: 7/7/2026
MEDIUM4.3PyPI
PYSEC-2026-1333· CVE-2023-47114, GHSA-3vpf-mcj7-5h38Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages
Modified: 7/7/2026
MEDIUM5.3PyPI
PYSEC-2026-1334· CVE-2024-31223, GHSA-53q7-4874-24qgInformation Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL
Modified: 7/7/2026
MEDIUM6.5PyPI
PYSEC-2026-1335· CVE-2025-57815, GHSA-7q62-r88r-j5gwFides has a Lack of Brute-Force Protections on Authentication Endpoints
Modified: 7/7/2026
HIGH8.2PyPI
PYSEC-2026-1336· CVE-2023-48224, GHSA-82vr-5769-6358Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification
Modified: 7/7/2026
LOW2.3PyPI
PYSEC-2026-1337· CVE-2024-34715, GHSA-8cm5-jfj2-26q7Fides Webserver Logs Hosted Database Password Partial Exposure Vulnerability
Modified: 7/7/2026
CRITICAL9.1PyPI
PYSEC-2026-1338· CVE-2024-45053, GHSA-c34r-238x-f7qxRemote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine
Modified: 7/7/2026
—0.0PyPI
PYSEC-2026-1339· CVE-2024-38537, GHSA-cvw4-c69g-7v7mInclusion of Untrusted polyfill.io Code Vulnerability in fides.js
Modified: 7/7/2026
LOW3.9PyPI
PYSEC-2026-1340· CVE-2023-46126, GHSA-fgjj-5jmr-gh83Fides JavaScript Injection Vulnerability in Privacy Center URL
Modified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-1341· CVE-2025-57816, GHSA-fq34-xw6c-fphfFides Webserver API Rate Limiting Vulnerability in Proxied Environments
Modified: 7/7/2026
LOW2.7PyPI
PYSEC-2026-1342· CVE-2023-37480, GHSA-g95c-2jgm-hqc6Fides Webserver Vulnerable to Zip Bomb File Uploads
Modified: 7/7/2026
HIGH7.2PyPI
PYSEC-2026-1343· CVE-2025-57817, GHSA-hjfh-p8f5-24wrFides Webserver API is Vulnerable to OAuth Client Privilege Escalation
Modified: 7/7/2026
HIGH8.2PyPI
PYSEC-2026-1344· CVE-2023-46124, GHSA-jq3w-9mgf-43m4Fides Server-Side Request Forgery Vulnerability in Custom Integration Upload
Modified: 7/7/2026
HIGH8.8PyPI
PYSEC-2026-1345· CVE-2023-41319, GHSA-p6p2-qq95-vq5hRemote Code Execution in Custom Integration Upload
Modified: 7/7/2026
MEDIUM6.5PyPI
PYSEC-2026-1346· CVE-2024-35189, GHSA-rcvg-jj3g-rj7cSensitive Data Disclosure Vulnerability in Connection Configuration Endpoints
Modified: 7/7/2026
MEDIUM6.5PyPI
PYSEC-2026-1347· CVE-2023-46125, GHSA-rjxg-rpg3-9r89Fides Information Disclosure Vulnerability in Config API Endpoint
Modified: 7/7/2026
MEDIUM4.8PyPI
PYSEC-2026-1348· CVE-2025-57766, GHSA-rpw8-82v9-3q87Fides' Admin UI User Password Change Does Not Invalidate Current Session
Modified: 7/7/2026
MEDIUM5.7PyPI
PYSEC-2026-1349· CVE-2024-52008, GHSA-v7vm-rhmg-8j2rPassword Policy Bypass Vulnerability in Fides Webserver User Accept Invite API
Modified: 7/7/2026
—PyPI
PYSEC-2026-2470· CVE-2026-44541, GHSA-5qrq-9645-g5g2ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override
Modified: 7/13/2026
—PyPI
PYSEC-2026-2471· CVE-2026-42303, GHSA-qx5f-ghc2-7g5cEthyca Fides has a Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection
Modified: 7/13/2026