ethyca fides vulnerabilities

CVEs per yearBy the year they were published

1. 20239
2. 20247
3. 20254
4. 20262

Newest CVEs

• CVE-2026-44541

  Fides: DOM-based XSS vulnerability in fides.js via fides_description override

  ethyca · fides

  High7.0
• CVE-2026-42303

  Fides: Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection

  ethyca · fides

  Medium6.1
• CVE-2025-57817

  Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation

  ethyca · fides

  High8.6
• CVE-2025-57816

  Fides Webserver API Rate Limiting Vulnerability in Proxied Environments

  ethyca · fides

  Medium6.3
• CVE-2025-57766

  Fides's Admin UI User Password Change Does Not Invalidate Current Session

  ethyca · fides

  Low1.7
• CVE-2025-57815

  Fides Lacks Brute-Force Protections on Authentication Endpoints

  ethyca · fides

  Low1.7
• CVE-2024-52008

  Password Policy Bypass Vulnerability in Fides Webserver

  ethyca · fides

  Low2.0
• CVE-2024-45053

  Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine

  ethyca · fides

  Critical9.1
• CVE-2024-45052

  Fides Webserver Authentication Timing-Based Username Enumeration Vulnerability

  ethyca · fides

  Medium5.3
• CVE-2024-31223

  Fides Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL

  ethyca · fides

  Medium5.3