PyPI/ethyca-fides CVE-2026-44541: high 7, EPSS 0.30%

ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override

Action: Upgrade ethyca-fides to 2.84.5 or later.

pip install ethyca-fides==2.84.5

Affected

Fixed versions

Sources

• osv: GHSA-5qrq-9645-g5g2
• nvd: CVE-2026-44541
• https://github.com/ethyca/fides/security/advisories/GHSA-5qrq-9645-g5g2
• https://github.com/ethyca/fides/commit/67e43b10b1096c7f84d5c0eeba08ee3b7846b7cd
• https://github.com/ethyca/fides
• https://github.com/ethyca/fides/releases/tag/2.84.5

CVE-2026-44541 · published 2026-05-14T19:04:14Z · modified 2026-07-13T16:43:34.902659178Z · JSON