feast-dev feast

• CVE-2026-55563 High 8.9 Feast: `pull_request_target` integration tests run untrusted fork code with production cloud secrets; the `ok-to-test` label guard is bypassable via label persistence on `synchronize` 0.5%
• CVE-2026-92787 Critical 9.8 Feast through 0.66.0 Authentication Bypass via Unverified Token 0.7%
• CVE-2026-56121 Critical 9.8 Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization 1.4%