pypi

ethyca-fides

44 Total advisories

44 Vulnerabilities

0 Malware

Dependency scanning

Check whether ethyca-fides is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

ethyca-fides

Vulnerabilities

Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation

Timing-Based Username Enumeration Vulnerability in Fides Webserver Authentication

Fides' Admin UI User Password Change Does Not Invalidate Current Session

Fides Webserver API Rate Limiting Vulnerability in Proxied Environments

Fides has a Lack of Brute-Force Protections on Authentication Endpoints

Password Policy Bypass Vulnerability in Fides Webserver User Accept Invite API

Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine

Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js

Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL

Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints

Fides Webserver Logs Hosted Database Password Partial Exposure Vulnerability

Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages

Fides JavaScript Injection Vulnerability in Privacy Center URL

ethyca-fides Webserver API Path Traversal vulnerability

Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification

Fides Server-Side Request Forgery Vulnerability in Custom Integration Upload

Remote Code Execution in Custom Integration Upload

Fides Webserver Vulnerable to Zip Bomb File Uploads

Fides Webserver Vulnerable to SVG Bomb File Uploads

Fides Information Disclosure Vulnerability in Config API Endpoint

ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override

Ethyca Fides has a Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection