What’s Vulnerable › Products

feast-dev feast vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your feast-dev feast version is affected

Latest feast-dev feast vulnerabilities

• CVE-2026-55563 — Feast: `pull_request_target` integration tests run untrusted fork code with production cloud secrets; the `ok-to-test` label guard is bypassable via label persistence on `synchronize` (CVSS 8.9)
• CVE-2026-92787 — Feast through 0.66.0 Authentication Bypass via Unverified Token (CVSS 9.8)
• CVE-2026-56121 — Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization (CVSS 9.8)