{"action":"Upgrade ethyca-fides to 2.44.0 or later.","affected":[{"fixed":"2.44.0","introduced":"2.19.0"}],"component":"ethyca-fides","cve_ids":["CVE-2024-45053"],"ecosystem":"PyPI","epss":0.01342,"exploited":false,"fixed_versions":["2.44.0"],"ghsa_id":"GHSA-c34r-238x-f7qx","id":"tcs_01M5KFC0EGFQM8P5T6KFZV8X9V","modified_at":"2026-09-10T03:50:18.812733971Z","published_at":"2024-09-04T18:07:17Z","references":["https://osv.dev/vulnerability/GHSA-c34r-238x-f7qx","https://github.com/ethyca/fides/security/advisories/GHSA-c34r-238x-f7qx","https://nvd.nist.gov/vuln/detail/CVE-2024-45053","https://github.com/ethyca/fides/commit/829cbd9cb5ef9c814fbac1ed6800e8d939d359c5","https://github.com/ethyca/fides"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-c34r-238x-f7qx","url":"https://osv.dev/vulnerability/GHSA-c34r-238x-f7qx"}],"summary":"Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine"}