Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-2470
  • PyPI/ethyca-fides
 ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override 13 Jul
  • Fix available
  • Severity - 7.0 (High)
PYSEC-2026-2471
  • PyPI/ethyca-fides
 Ethyca Fides has a Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection 13 Jul
  • Fix available
  • Severity - 6.1 (Medium)
PYSEC-2026-1343
  • PyPI/ethyca-fides
 Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation 07 Jul
  • Fix available
  • Severity - 8.6 (High)
PYSEC-2026-1341
  • PyPI/ethyca-fides
 Fides Webserver API Rate Limiting Vulnerability in Proxied Environments 07 Jul
  • Fix available
  • Severity - 6.3 (Medium)
PYSEC-2026-1335
  • PyPI/ethyca-fides
 Fides has a Lack of Brute-Force Protections on Authentication Endpoints 07 Jul
  • Fix available
  • Severity - 2.3 (Low)
PYSEC-2026-1348
  • PyPI/ethyca-fides
 Fides' Admin UI User Password Change Does Not Invalidate Current Session 07 Jul
  • Fix available
  • Severity - 1.7 (Low)
PYSEC-2026-1349
  • PyPI/ethyca-fides
 Password Policy Bypass Vulnerability in Fides Webserver User Accept Invite API 07 Jul
  • Fix available
  • Severity - 1.9 (Low)
PYSEC-2026-1338
  • PyPI/ethyca-fides
 Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine 07 Jul
  • Fix available
  • Severity - 8.6 (High)
PYSEC-2026-1331
  • PyPI/ethyca-fides
 Timing-Based Username Enumeration Vulnerability in Fides Webserver Authentication 07 Jul
  • Fix available
PYSEC-2026-1334
  • PyPI/ethyca-fides
 Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1339
  • PyPI/ethyca-fides
 Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js 07 Jul
  • Fix available
  • Severity - 0.0 (None)
PYSEC-2026-1346
  • PyPI/ethyca-fides
 Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints 07 Jul
  • Fix available
  • Severity - 6.5 (Medium)
PYSEC-2026-1337
  • PyPI/ethyca-fides
 Fides Webserver Logs Hosted Database Password Partial Exposure Vulnerability 07 Jul
  • Fix available
  • Severity - 2.3 (Low)
PYSEC-2026-1336
  • PyPI/ethyca-fides
 Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification 07 Jul
  • Fix available
  • Severity - 8.2 (High)
PYSEC-2026-1333
  • PyPI/ethyca-fides
 Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages 07 Jul
  • Fix available
  • Severity - 4.3 (Medium)
PYSEC-2026-1340
  • PyPI/ethyca-fides
 Fides JavaScript Injection Vulnerability in Privacy Center URL 07 Jul
  • Fix available
  • Severity - 3.9 (Low)
Load more...