Skip to main content

Fides

20 CVEs product

Monthly

CVE-2025-57817 Sep 08, 22:15 PyPI HIGH PATCH This Month

Fides is an open-source privacy engineering platform. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.

Authentication Bypass Fides Ethyca
NVD GitHub
CVSS 4.0
8.6
EPSS
0.1%
CVE-2025-57816 Sep 08, 22:15 PyPI MEDIUM PATCH This Month

Fides is an open-source privacy engineering platform. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Fides Ethyca
NVD GitHub
CVSS 4.0
6.3
EPSS
0.0%
CVE-2025-57815 Sep 08, 22:15 PyPI LOW PATCH Monitor

Fides is an open-source privacy engineering platform. Rated low severity (CVSS 1.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Google Microsoft Fides Ethyca
NVD GitHub
CVSS 4.0
1.7
EPSS
0.1%
CVE-2025-57766 Sep 08, 22:15 PyPI LOW POC PATCH Monitor

Fides is an open-source privacy engineering platform. Rated low severity (CVSS 1.7), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

XSS Fides Ethyca
NVD GitHub
CVSS 4.0
1.7
EPSS
0.0%
CVE-2024-52008 Nov 26, 19:15 PyPI LOW PATCH Monitor

Fides is an open-source privacy engineering platform. Rated low severity (CVSS 2.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Fides Ethyca
NVD GitHub
CVSS 4.0
2.0
EPSS
0.5%
CVE-2024-45053 Sep 04, 16:15 PyPI HIGH POC PATCH This Week

Fides is an open-source privacy engineering platform. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

RCE Ssti Fides Ethyca
NVD GitHub
CVSS 3.1
7.2
EPSS
1.3%
CVE-2024-45052 Sep 04, 16:15 PyPI MEDIUM POC PATCH This Month

Fides is an open-source privacy engineering platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Fides Ethyca
NVD GitHub
CVSS 3.1
5.3
EPSS
0.6%
CVE-2024-31223 Jul 03, 18:15 PyPI MEDIUM POC PATCH This Month

Fides is an open-source privacy engineering platform, and `SERVER_SIDE_FIDES_API_URL` is a server-side configuration environment variable used by the Fides Privacy Center to communicate with the. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Fides Ethyca
NVD GitHub
CVSS 3.1
5.3
EPSS
1.1%
CVE-2024-38537 Jul 02, 20:15 PyPI CRITICAL PATCH Act Now

Fides is an open-source privacy engineering platform. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Fides Ethyca
NVD GitHub
CVSS 3.1
9.8
EPSS
1.4%
CVE-2024-35189 May 30, 20:15 PyPI MEDIUM POC PATCH This Month

Fides is an open-source privacy engineering platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Google Fides Ethyca
NVD GitHub
CVSS 3.1
6.5
EPSS
0.6%
CVE-2024-34715 May 29, 17:16 PyPI LOW POC PATCH Monitor

Fides is an open-source privacy engineering platform. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. Public exploit code available.

Information Disclosure PostgreSQL Fides Ethyca
NVD GitHub
CVSS 3.1
3.3
EPSS
0.3%
CVE-2023-48224 Nov 15, 21:15 PyPI CRITICAL PATCH Act Now

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Python Information Disclosure Fides Ethyca
NVD GitHub
CVSS 3.1
9.1
EPSS
1.0%
CVE-2023-47114 Nov 08, 22:15 PyPI MEDIUM PATCH This Month

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in your runtime environment, and the enforcement of privacy regulations in your code. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS RCE Fides Ethyca
NVD GitHub
CVSS 3.1
6.1
EPSS
0.6%
CVE-2023-46126 Oct 25, 18:17 PyPI MEDIUM PATCH This Month

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime environments, helping enforce privacy regulations in code. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Fides Ethyca
NVD GitHub
CVSS 3.1
5.4
EPSS
0.6%
CVE-2023-46125 Oct 25, 18:17 PyPI MEDIUM PATCH This Month

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Fides Ethyca
NVD GitHub
CVSS 3.1
6.5
EPSS
0.7%
CVE-2023-46124 Oct 25, 18:17 PyPI HIGH PATCH This Week

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime environments, and the enforcement of privacy regulations in code. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. This Server-Side Request Forgery (SSRF) vulnerability could allow attackers to make the server perform requests to unintended internal or external resources.

SSRF Fides Ethyca
NVD GitHub
CVSS 3.1
7.2
EPSS
0.7%
CVE-2023-41319 Sep 06, 18:15 PyPI HIGH PATCH This Week

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

RCE Python Code Injection Fides Ethyca
NVD GitHub
CVSS 3.1
7.2
EPSS
0.8%
CVE-2023-37481 Jul 18, 19:15 PyPI MEDIUM PATCH This Month

Fides is an open-source privacy engineering platform for managing data privacy requests and privacy regulations. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Fides Ethyca
NVD GitHub
CVSS 3.1
4.9
EPSS
0.6%
CVE-2023-37480 Jul 18, 19:15 PyPI MEDIUM PATCH This Month

Fides is an open-source privacy engineering platform for managing data privacy requests and privacy regulations. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Fides Ethyca
NVD GitHub
CVSS 3.1
4.9
EPSS
0.6%
CVE-2023-36827 Jul 05, 22:15 PyPI HIGH PATCH This Week

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Fides Ethyca
NVD GitHub
CVSS 3.1
7.5
EPSS
1.5%
EPSS 0% CVSS 8.6
HIGH PATCH This Month

Fides is an open-source privacy engineering platform. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.

Authentication Bypass Fides Ethyca
NVD GitHub
EPSS 0% CVSS 6.3
MEDIUM PATCH This Month

Fides is an open-source privacy engineering platform. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Fides Ethyca
NVD GitHub
EPSS 0% CVSS 1.7
LOW PATCH Monitor

Fides is an open-source privacy engineering platform. Rated low severity (CVSS 1.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Google Microsoft +2
NVD GitHub
EPSS 0% CVSS 1.7
LOW POC PATCH Monitor

Fides is an open-source privacy engineering platform. Rated low severity (CVSS 1.7), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

XSS Fides Ethyca
NVD GitHub
EPSS 1% CVSS 2.0
LOW PATCH Monitor

Fides is an open-source privacy engineering platform. Rated low severity (CVSS 2.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Fides Ethyca
NVD GitHub
EPSS 1% CVSS 7.2
HIGH POC PATCH This Week

Fides is an open-source privacy engineering platform. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

RCE Ssti Fides +1
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM POC PATCH This Month

Fides is an open-source privacy engineering platform. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Fides Ethyca
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM POC PATCH This Month

Fides is an open-source privacy engineering platform, and `SERVER_SIDE_FIDES_API_URL` is a server-side configuration environment variable used by the Fides Privacy Center to communicate with the. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Fides Ethyca
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

Fides is an open-source privacy engineering platform. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Fides Ethyca
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM POC PATCH This Month

Fides is an open-source privacy engineering platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Google Fides +1
NVD GitHub
EPSS 0% CVSS 3.3
LOW POC PATCH Monitor

Fides is an open-source privacy engineering platform. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. Public exploit code available.

Information Disclosure PostgreSQL Fides +1
NVD GitHub
EPSS 1% CVSS 9.1
CRITICAL PATCH Act Now

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Python Information Disclosure Fides +1
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM PATCH This Month

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in your runtime environment, and the enforcement of privacy regulations in your code. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS RCE Fides +1
NVD GitHub
EPSS 1% CVSS 5.4
MEDIUM PATCH This Month

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime environments, helping enforce privacy regulations in code. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Fides Ethyca
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Fides Ethyca
NVD GitHub
EPSS 1% CVSS 7.2
HIGH PATCH This Week

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime environments, and the enforcement of privacy regulations in code. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. This Server-Side Request Forgery (SSRF) vulnerability could allow attackers to make the server perform requests to unintended internal or external resources.

SSRF Fides Ethyca
NVD GitHub
EPSS 1% CVSS 7.2
HIGH PATCH This Week

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

RCE Python Code Injection +2
NVD GitHub
EPSS 1% CVSS 4.9
MEDIUM PATCH This Month

Fides is an open-source privacy engineering platform for managing data privacy requests and privacy regulations. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Fides Ethyca
NVD GitHub
EPSS 1% CVSS 4.9
MEDIUM PATCH This Month

Fides is an open-source privacy engineering platform for managing data privacy requests and privacy regulations. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Fides Ethyca
NVD GitHub
EPSS 1% CVSS 7.5
HIGH PATCH This Week

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of privacy regulations in code. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Fides Ethyca
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy