CVE-2026-42303
2 advisories.
PyPI/ethyca-fides CVE-2026-42303: medium, EPSS 0.55%
Ethyca Fides has a Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection
Action: Upgrade ethyca-fides to 2.83.2 or later.
pip install ethyca-fides==2.83.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.75.0 | 2.83.2 | - |
Fixed versions
| 2.83.2 |
Sources
- osv: GHSA-qx5f-ghc2-7g5c
- https://github.com/ethyca/fides/security/advisories/GHSA-qx5f-ghc2-7g5c
- https://nvd.nist.gov/vuln/detail/CVE-2026-42303
- https://github.com/ethyca/fides/pull/7971
- https://github.com/ethyca/fides/pull/7972
- https://github.com/ethyca/fides/commit/0e320b20934eb5af3a3d5127dba2691605d7ff37
- https://github.com/ethyca/fides/commit/e7a6527b0f9fdc9887b86a89bb5453e7421882dd
- https://github.com/ethyca/fides
- https://github.com/ethyca/fides/releases/tag/2.83.2
CVE-2026-42303 · published · modified · JSON
PyPI/ethyca-fides CVE-2026-42303: unknown, EPSS 0.55%
Ethyca Fides has a Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection
Action: Upgrade ethyca-fides to 2.83.2 or later.
pip install ethyca-fides==2.83.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.75.0 | 2.83.2 | - |
Fixed versions
| 2.83.2 |
Sources
- osv: PYSEC-2026-2471
- https://github.com/ethyca/fides/security/advisories/GHSA-qx5f-ghc2-7g5c
- https://nvd.nist.gov/vuln/detail/CVE-2026-42303
- https://github.com/ethyca/fides/pull/7971
- https://github.com/ethyca/fides/pull/7972
- https://github.com/ethyca/fides/commit/0e320b20934eb5af3a3d5127dba2691605d7ff37
- https://github.com/ethyca/fides/commit/e7a6527b0f9fdc9887b86a89bb5453e7421882dd
- https://github.com/ethyca/fides
- https://github.com/ethyca/fides/releases/tag/2.83.2
- https://pypi.org/project/ethyca-fides
- https://github.com/advisories/GHSA-qx5f-ghc2-7g5c
CVE-2026-42303 · published · modified · JSON