Executive brief
Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification
Affected products
- PyPI ethyca-fides
Junglewise Threat Intelligence
CVE-2023-48224: PYSEC-2026-1336 - Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification
CVE-2023-48224 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: ethyca-fides (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1343 - Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation
- PYSEC-2026-1341 - Fides Webserver API Rate Limiting Vulnerability in Proxied Environments
- PYSEC-2026-1335 - Fides has a Lack of Brute-Force Protections on Authentication Endpoints
- PYSEC-2026-1348 - Fides' Admin UI User Password Change Does Not Invalidate Current Session
- PYSEC-2026-1349 - Password Policy Bypass Vulnerability in Fides Webserver User Accept Invite API