Vulnerabilidades do Ethyca Fides
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Ethyca Fides: 2 registro(s), com versões afetadas e correções.
CVE-2026-44541
Alta · 7.0
CWE-79 08/06/2026
Fides: DOM-based XSS vulnerability in fides.js via fides_description override
Fides is an open-source privacy engineering platform. From version 2.33.0 to before version 2.84.5, there is a DOM-based XSS vulnerability in fides.js via the fides_description override. This issue has been patched in version 2.84.5.
CVE-2026-42303
Média · 6.1
CWE-288 12/05/2026
Fides: Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection
Fides is an open-source privacy engineering platform. From 2.75.0 to before 2.83.2, Fides deployments that enable both subject identity verification and duplicate privacy request detection are affected by a vulnerability in which an administrator can approve a privacy request whose identity was never verified. For erasure policies, this can result in unauthorized deletion of a data subject's records across every integration configured in the affected deployment. This vulnerability is fixed in 2.83.2.