PyPI/ethyca-fides CVE-2024-45053: critical 9.1, EPSS 1.34%

Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine

Action: Upgrade ethyca-fides to 2.44.0 or later.

pip install ethyca-fides==2.44.0

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1338
• https://github.com/ethyca/fides/security/advisories/GHSA-c34r-238x-f7qx
• https://nvd.nist.gov/vuln/detail/CVE-2024-45053
• https://github.com/ethyca/fides/commit/829cbd9cb5ef9c814fbac1ed6800e8d939d359c5
• https://github.com/ethyca/fides
• https://pypi.org/project/ethyca-fides
• https://github.com/advisories/GHSA-c34r-238x-f7qx

CVE-2024-45053 · published 2026-07-07T14:34:40.219786Z · modified 2026-07-07T17:46:40.275437366Z · JSON