Feast-dev - vulnerabilities (CVEs)

5 CVEs in 2 products, 0 in the last 30 days, newest from 2026-09-21.

Products

• Feast - 3 CVEs
• Feast-devfeast - 2 CVEs

Newest CVEs of Feast-dev

• CVE-2026-55563 - CVSS 8.9 (high), 2026-09-21: Feast is the open source feature store for AI and machine learning. Prior to 0.65.0, .github/workflows/pr_integration_tests.yml uses pull_request_target with…
• CVE-2026-92787 - CVSS 9.8 (critical), 2026-09-16: Feast through 0.66.0 fails to verify JWT token signatures before establishing user identity, allowing attackers to bypass all role-based access control by…
• CVE-2026-56121 - CVSS 9.8 (critical), 2026-06-24: Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized attackers to achieve remote code execution by…
• CVE-2025-11157 - CVSS 7.8 (high), 2026-01-01: A high-severity remote code execution vulnerability exists in feast-dev/feast version 0.53.0, specifically in the Kubernetes materializer job located at…
• CVE-2024-11602 - CVSS 7.4 (high), 2025-03-20: A Cross-Origin Resource Sharing (CORS) vulnerability exists in feast-dev/feast version 0.40.0. The CORS configuration on the agentscope server does not…