Log in Start free

feast-dev

Products

ProductCVEsExploitedLatest
feast3–Sep 21, 2026
feast-dev/feast2–Jan 1, 2026

Exploited and recent CVEs

  • CVE-2026-55563 High 8.9 Feast: `pull_request_target` integration tests run untrusted fork code with production cloud secrets; the `ok-to-test` label guard is bypassable via label persistence on `synchronize` 0.5%
  • CVE-2026-92787 Critical 9.8 Feast through 0.66.0 Authentication Bypass via Unverified Token 0.7%
  • CVE-2026-56121 Critical 9.8 Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization 1.4%
  • CVE-2025-11157 High 7.8 Arbitrary Code Execution in feast-dev/feast 0.3%
  • CVE-2024-11602 High 7.4 CORS Vulnerability in feast-dev/feast 0.3%