251 matches found
Ethyca Fides has a Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection
Summary Fides deployments that enable both subject identity verification and duplicate privacy request detection are affected by a vulnerability in which an administrator can approve a privacy request whose identity was never verified. For erasure policies, this can result in unauthorized deletio...
PT-2026-37261
Name of the Vulnerable Software and Affected Versions Fides versions 2.75.0 through 2.83.1 Description Deployments that enable both subject identity verification and duplicate privacy request detection are susceptible to an issue where an administrator can approve a privacy request without the...
CVE-2024-34715
Fides is an open-source privacy engineering platform. The Fides webserver requires a connection to a hosted PostgreSQL database for persistent storage of application data. If the password used by the webserver for this database connection includes special characters such as @ and $, webserver...
Improper Session Invalidation
ethycafides is vulnerable to improper session invalidation. The vulnerability is due to active user sessions not being invalidated after an admin UI password change, which allows an attacker with previously obtained session tokens to maintain unauthorized access even after a password reset...
Improper Authorization
ethycafides is vulnerable to improper authorization. The vulnerability is due to insufficient scope validation in the OAuth client creation and update endpoints, which allows an attacker or a highly privileged user to escalate privileges to owner-level...
EUVD-2023-2057
Malicious code in bioql PyPI...
EUVD-2024-2256
Malicious code in bioql PyPI...
EUVD-2023-2765
Malicious code in bioql PyPI...
EUVD-2024-2694
Malicious code in bioql PyPI...
EUVD-2025-27262
Malicious code in bioql PyPI...
EUVD-2024-2766
Malicious code in bioql PyPI...
EUVD-2025-29103
Malicious code in bioql PyPI...
EUVD-2025-27268
Malicious code in bioql PyPI...
EUVD-2024-2158
Malicious code in bioql PyPI...
EUVD-2023-0074
Malicious code in bioql PyPI...
EUVD-2023-1942
Malicious code in bioql PyPI...
EUVD-2025-27264
Malicious code in bioql PyPI...
EUVD-2024-1520
Malicious code in bioql PyPI...
EUVD-2023-2555
Malicious code in bioql PyPI...
CVE-2025-57817
Fides is an open-source privacy engineering platform. Prior to version 2.69.1, the OAuth client creation and update endpoints of the Fides Webserver API do not properly authorize scope assignment. This allows highly privileged users with client:create or client:update permissions to escalate thei...