How many CVEs have a located fix in ethyca/fides?

21 published CVEs have a fix traced to functions in ethyca/fides, touching 67 functions across 52 files.

Which function in ethyca/fides has been patched by the most CVEs?

save_template in src/fides/api/service/connectors/saas/connector_registry_service.py has been changed by 3 CVE fixes, from 2023 to 2023.

How large is a typical CVE fix in ethyca/fides?

The median fix changes 43 lines. 29% of fixes change 20 lines or fewer, and 10% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

python

typescript

#249 of 500 repositories

ethyca/fides

Name: ethyca/fides: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix June 8, 2026

21

CVE fixes located

Published CVEs

67

Functions patched

Distinct function sites

52

Files patched

Distinct source files

2023–2026

Years covered

By CVE publication date

Overview

21 published CVEs have a fix traced to functions in ethyca/fides, the earliest published in 2023. Those fixes changed 67 distinct functions across 52 files, in 372 patch hunks.

Among the 500 repositories tracked here, ethyca/fides ranks #249 by the number of CVEs with a located fix.

Most patched functions

Functions in ethyca/fides changed by the most CVE fixes.

Most patched files

Files in ethyca/fides changed by the most CVE fixes.

1src/fides/api/api/v1/endpoints/user_endpoints.py5 CVEs · 4 functions
2src/fides/api/oauth/utils.py3 CVEs · 5 functions
3src/fides/api/service/connectors/saas/connector_registry_service.py3 CVEs · 5 functions
4src/fides/api/api/v1/endpoints/oauth_endpoints.py3 CVEs · 3 functions
5src/fides/api/main.py3 CVEs · 3 functions
6src/fides/config/security_settings.py3 CVEs · 2 functions
7clients/fides-js/src/lib/consent-types.ts2 CVEs · 4 functions
8clients/privacy-center/pages/api/fides-js.ts2 CVEs · 2 functions
9src/fides/api/models/client.py2 CVEs · 2 functions
10src/fides/api/util/unsafe_file_util.py2 CVEs · 2 functions

Fix size

How much code a CVE fix in ethyca/fides changes, with backports counted once.

43

Median lines changed

Added plus removed, per CVE

29%

Fixes of 20 lines or fewer

Share of CVE fixes

10%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in ethyca/fides, and the functions each fix changed.

Fides: DOM-based XSS vulnerability in fides.js via fides_description override
CVE-2026-44541init to FidesExperienceLanguageValidatorMap
High · CVSS 7.0
EPSS 0.5%2026-06-08
Fides: Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection
CVE-2026-42303timestamp approve_privacy_requests PrivacyRequestEntity
Medium · CVSS 6.1
EPSS 0.6%2026-05-12
Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation
CVE-2025-57817get_client_effective_scopes acquire_access_token get_client_scopes
High · CVSS 8.6
EPSS 0.4%2025-09-08
Fides Webserver API Rate Limiting Vulnerability in Proxied Environments
CVE-2025-57816InvalidClientIPError rate_limit_handler resolve_read_only_ssl_ca_certs
Medium · CVSS 6.3
EPSS 0.4%2025-09-08
Fides's Admin UI User Password Change Does Not Invalidate Current Session
CVE-2025-57766is_token_invalidated force_update_password update_user_password
Low · CVSS 1.7
EPSS 0.3%2025-09-08
Fides Lacks Brute-Force Protections on Authentication Endpoints
CVE-2025-57815InvalidClientIPError rate_limit_handler resolve_read_only_ssl_ca_certs
Low · CVSS 2.3
EPSS 0.3%2025-09-08
Password Policy Bypass Vulnerability in Fides Webserver User Accept Invite API
CVE-2024-52008_validate_password validate_new_password force_update_password
Low · CVSS 2.0
EPSS 0.6%2024-11-26
Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine
CVE-2024-45053upgrade _render
High · CVSS 8.6
EPSS 1.3%2024-09-04
Timing-Based Username Enumeration Vulnerability in Fides Webserver Authentication
CVE-2024-45052create_temporary_user_for_login_flow create_client_and_secret user_login
Medium · CVSS 5.3
EPSS 0.6%2024-09-04
Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL
CVE-2024-31223PrivacyCenterServerSettings handler fetchCustomFidesCss
Medium · CVSS 5.3
EPSS 1.1%2024-07-03
Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js
CVE-2024-38537handler
Critical · CVSS 9.8
EPSS 1.4%2024-07-02
Fides Webserver Logs Hosted Database Password Partial Exposure Vulnerability
CVE-2024-34715escape_password get_alembic_config DatabaseSettings
Low · CVSS 3.3
EPSS 0.3%2024-05-29

Get an alert for each new ethyca/fides CVE, with the patched functions and AI-written analysis.

Monitor fides CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

debian/libvirt21 CVEs debian/libxml221 CVEs flatpressblog/flatpress21 CVEs francoisjacquet/rosariosis21 CVEs FreshRSS/FreshRSS21 CVEs huggingface/transformers21 CVEs ILIAS-eLearning/ILIAS21 CVEs instantsoft/icms221 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in ethyca/fides.

How many CVEs have a located fix in ethyca/fides?: 21 published CVEs have a fix traced to functions in ethyca/fides, touching 67 functions across 52 files.
Which function in ethyca/fides has been patched by the most CVEs?: save_template in src/fides/api/service/connectors/saas/connector_registry_service.py has been changed by 3 CVE fixes, from 2023 to 2023.
How large is a typical CVE fix in ethyca/fides?: The median fix changes 43 lines. 29% of fixes change 20 lines or fewer, and 10% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track ethyca/fides CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing