feast-dev vulnerabilities
5 published CVEs name feast-dev among the affected products.
- 5Published CVEs5 of them scored
- 4Last 12 monthspublished in the last year
- 2Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-55563
Feast: `pull_request_target` integration tests run untrusted fork code with production cloud secrets; the `ok-to-test` label guard is bypassable via label persistence on `synchronize`
feast-dev · feast
High8.9 - CVE-2026-92787
Feast through 0.66.0 Authentication Bypass via Unverified Token
feast-dev · feast
Critical9.3 - CVE-2026-56121
Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization
feast-dev · feast
Critical9.3 - CVE-2025-11157
Arbitrary Code Execution in feast-dev/feast
feast-dev · feast-dev/feast
High7.8 - CVE-2024-11602
CORS Vulnerability in feast-dev/feast
feast-dev · feast-dev/feast
High7.4