Vulnerabilities in feast-dev

5 results

CVE-2026-56121CRITICALFeast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC DeserializationEPSS 1.4%CVE-2026-92787CRITICALFeast through 0.66.0 Authentication Bypass via Unverified TokenEPSS 0.7%CVE-2026-55563HIGHFeast: `pull_request_target` integration tests run untrusted fork code with production cloud secrets; the `ok-to-test` label guard is bypassable via label persistence on `synchronize`EPSS 0.5%CVE-2024-11602HIGHCORS Vulnerability in feast-dev/feastEPSS 0.3%CVE-2025-11157HIGHArbitrary Code Execution in feast-dev/feastEPSS 0.3%