PyPI/ethyca-fides CVE-2026-44541: unknown, EPSS 0.30%

ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override

Action: Upgrade ethyca-fides to 2.84.5 or later.

pip install ethyca-fides==2.84.5

Affected

Fixed versions

Sources

• osv: PYSEC-2026-2470
• https://github.com/ethyca/fides/security/advisories/GHSA-5qrq-9645-g5g2
• https://nvd.nist.gov/vuln/detail/CVE-2026-44541
• https://github.com/ethyca/fides/commit/67e43b10b1096c7f84d5c0eeba08ee3b7846b7cd
• https://github.com/ethyca/fides
• https://github.com/ethyca/fides/releases/tag/2.84.5
• https://pypi.org/project/ethyca-fides
• https://github.com/advisories/GHSA-5qrq-9645-g5g2

CVE-2026-44541 · published 2026-07-13T15:19:05.723629Z · modified 2026-07-13T16:31:46.184662892Z · JSON