PyPI/ethyca-fides CVE-2024-52008: medium 5.7, EPSS 0.56%

Password Policy Bypass Vulnerability in Fides Webserver User Accept Invite API

Action: Upgrade ethyca-fides to 2.50.0 or later.

pip install ethyca-fides==2.50.0

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1349
• https://github.com/ethyca/fides/security/advisories/GHSA-v7vm-rhmg-8j2r
• https://nvd.nist.gov/vuln/detail/CVE-2024-52008
• https://github.com/ethyca/fides/commit/ce664da46ab7f86d29583ebc34f2ff776f0aa6c2
• https://github.com/ethyca/fides
• https://pypi.org/project/ethyca-fides
• https://github.com/advisories/GHSA-v7vm-rhmg-8j2r

CVE-2024-52008 · published 2026-07-07T14:34:45.812788Z · modified 2026-07-07T17:46:41.662503353Z · JSON