PyPI/ethyca-fides CVE-2023-41319: high 8.8, EPSS 0.94%
Remote Code Execution in Custom Integration Upload
Action: Upgrade ethyca-fides to 2.19.0 or later.
pip install ethyca-fides==2.19.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.11.0 | 2.19.0 | - |
Fixed versions
| 2.19.0 |
Sources
- osv: PYSEC-2026-1345
- https://github.com/ethyca/fides/security/advisories/GHSA-p6p2-qq95-vq5h
- https://nvd.nist.gov/vuln/detail/CVE-2023-41319
- https://github.com/ethyca/fides/commit/5989b5fa744c8d8c340963b895a054883549358a
- https://github.com/ethyca/fides
- https://pypi.org/project/ethyca-fides
- https://github.com/advisories/GHSA-p6p2-qq95-vq5h
CVE-2023-41319 · published · modified · JSON