ethyca fides

• CVE-2026-44541 High 7.0 Fides: DOM-based XSS vulnerability in fides.js via fides_description override 0.3%
• CVE-2026-42303 Medium 6.1 Fides: Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection 0.3%
• CVE-2025-57817 High 8.6 Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation 0.4%
• CVE-2025-57816 Medium 6.3 Fides Webserver API Rate Limiting Vulnerability in Proxied Environments 0.4%
• CVE-2025-57766 Low 1.7 Fides's Admin UI User Password Change Does Not Invalidate Current Session 0.3%
• CVE-2025-57815 Low 1.7 Fides Lacks Brute-Force Protections on Authentication Endpoints 0.3%
• CVE-2024-52008 Low 2.0 Password Policy Bypass Vulnerability in Fides Webserver 0.6%
• CVE-2024-45053 Critical 9.1 Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine 1.3%
• CVE-2024-45052 Medium 5.3 Fides Webserver Authentication Timing-Based Username Enumeration Vulnerability 0.6%
• CVE-2024-31223 Medium 5.3 Fides Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL 1.1%
• CVE-2024-38537 None 0.0 Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js 1.4%
• CVE-2024-35189 Medium 6.5 Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints in Fides 0.6%
• CVE-2024-34715 Low 2.3 Partial Password Exposure Vulnerability in Fides Webserver Logs 0.3%
• CVE-2023-48224 High 8.2 Cryptographically Weak Generation of One-Time Codes for Identity Verification in ethyca-fides 1.0%
• CVE-2023-47114 Medium 4.3 Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages 0.6%
• CVE-2023-46124 High 8.2 Server-Side Request Forgery Vulnerability in Custom Integration Upload 0.8%
• CVE-2023-46125 Medium 6.5 Fides Information Disclosure Vulnerability in Config API Endpoint 0.9%
• CVE-2023-46126 Low 3.9 Fides JavaScript Injection Vulnerability in Privacy Center URL 0.7%
• CVE-2023-41319 High 8.8 Remote Code Execution in Custom Integration Upload in Fides 0.9%
• CVE-2023-37480 Low 2.7 Fides Webserver Vulnerable to Zip Bomb File Uploads 0.7%
• CVE-2023-37481 Low 2.7 Fides Webserver Vulnerable to SVG Bomb File Uploads 0.7%
• CVE-2023-36827 High 7.5 Fides vulnerable to Path Traversal in Webserver API 1.5%