Security
فارسی
All products

ethyca-fides

PyPI · Package
22 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Fides Webserver API is Vulnerable to OAuth Client Privilege EscalationCVE-2025-57817 · GHSA-HJFH-P8F5-24WRVersion ranges need review. ethyca-fides PyPI High Fix reported
Timing-Based Username Enumeration Vulnerability in Fides Webserver AuthenticationCVE-2024-45052 · GHSA-2H46-8GF5-FMXVVersion ranges need review. ethyca-fides PyPI Low Fix reported
Fides Webserver API Rate Limiting Vulnerability in Proxied EnvironmentsCVE-2025-57816 · GHSA-FQ34-XW6C-FPHFVersion ranges need review. ethyca-fides PyPI Medium Fix reported
Fides' Admin UI User Password Change Does Not Invalidate Current SessionCVE-2025-57766 · GHSA-RPW8-82V9-3Q87Version ranges need review. ethyca-fides PyPI Low Fix reported
Fides has a Lack of Brute-Force Protections on Authentication EndpointsCVE-2025-57815 · GHSA-7Q62-R88R-J5GWVersion ranges need review. ethyca-fides PyPI Low Fix reported
Password Policy Bypass Vulnerability in Fides Webserver User Accept Invite APICVE-2024-52008 · GHSA-V7VM-RHMG-8J2RVersion ranges need review. ethyca-fides PyPI Low Fix reported
Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating EngineCVE-2024-45053 · GHSA-C34R-238X-F7QXVersion ranges need review. ethyca-fides PyPI High Fix reported
Inclusion of Untrusted polyfill.io Code Vulnerability in fides.jsCVE-2024-38537 · GHSA-CVW4-C69G-7V7MVersion ranges need review. ethyca-fides PyPI Low Fix reported
Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URLCVE-2024-31223 · GHSA-53Q7-4874-24QGVersion ranges need review. ethyca-fides PyPI Medium Fix reported
Sensitive Data Disclosure Vulnerability in Connection Configuration EndpointsCVE-2024-35189 · GHSA-RCVG-JJ3G-RJ7CVersion ranges need review. ethyca-fides PyPI Medium Fix reported
Fides Webserver Logs Hosted Database Password Partial Exposure VulnerabilityCVE-2024-34715 · GHSA-8CM5-JFJ2-26Q7Version ranges need review. ethyca-fides PyPI Low Fix reported
Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR PackagesCVE-2023-47114 · GHSA-3VPF-MCJ7-5H38Version ranges need review. ethyca-fides PyPI Medium Fix reported
Fides JavaScript Injection Vulnerability in Privacy Center URLCVE-2023-46126 · GHSA-FGJJ-5JMR-GH83Version ranges need review. ethyca-fides PyPI Low Fix reported
ethyca-fides Webserver API Path Traversal vulnerabilityCVE-2023-36827 · GHSA-R25M-CR6V-P9HQVersion ranges need review. ethyca-fides PyPI High Fix reported
Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity VerificationCVE-2023-48224 · GHSA-82VR-5769-6358Version ranges need review. ethyca-fides PyPI High Fix reported
Fides Server-Side Request Forgery Vulnerability in Custom Integration UploadCVE-2023-46124 · GHSA-JQ3W-9MGF-43M4Version ranges need review. ethyca-fides PyPI High Fix reported
Remote Code Execution in Custom Integration UploadCVE-2023-41319 · GHSA-P6P2-QQ95-VQ5HVersion ranges need review. ethyca-fides PyPI High Fix reported
Fides Webserver Vulnerable to SVG Bomb File UploadsCVE-2023-37481 · GHSA-3RW2-WFC8-WMJ5Version ranges need review. ethyca-fides PyPI Low Fix reported
Fides Webserver Vulnerable to Zip Bomb File UploadsCVE-2023-37480 · GHSA-G95C-2JGM-HQC6Version ranges need review. ethyca-fides PyPI Low Fix reported
Fides Information Disclosure Vulnerability in Config API EndpointCVE-2023-46125 · GHSA-RJXG-RPG3-9R89Version ranges need review. ethyca-fides PyPI Medium Fix reported