Supply Chain Attack

Fides is vulnerable to Supply Chain Attack. The vulnerability is due to mishandling of client-side script dependencies and the use of a compromised third-party domain like polyfill.io. The vulnerability allows an attacker to serve malicious scripts to users of legacy browsers when they load fides.js from the compromised polyfill.io domain. Note that the compromised domain has been seized, rending this vulnerability unexploitable.