VULNERABILITY INTELLIGENCE

CVE-2026-44541

EPSS probability0.30%
CISA KEVNot currently listed
Published2026-06-08
Last modified2026-07-23

Description

Fides is an open-source privacy engineering platform. From version 2.33.0 to before version 2.84.5, there is a DOM-based XSS vulnerability in fides.js via the fides_description override. This issue has been patched in version 2.84.5.

Weakness classification

  • security-advisories@github.com: CWE-79

Primary references