feast vulnerabilities
CVEs whose affected-version data names the feast package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-55563High· 8.9PoCFeast is the open source feature store for AI and machine learning
Feast is the open source feature store for AI and machine learning. Prior to 0.65.0, .github/workflows/pr_integration_tests.yml uses pull_request_target with the synchronize event and preserves ok-to-test, approved, or lgtm labels across…
▾ Midnightfeast-dev · feastvia NVD
CVE-2026-92787Critical· 9.8PoCFeast through 0.66.0 fails to verify JWT token signatures before establishing user identity, allowing attackers to bypass all role-based access control by presenting an unverified token with a hardcoded claim value
Feast through 0.66.0 fails to verify JWT token signatures before establishing user identity, allowing attackers to bypass all role-based access control by presenting an unverified token with a hardcoded claim value. Attackers can obtain …
▾ Abyssalfeast-dev · feastEPSS 0.38%via NVD
CVE-2024-11602High· 7.4Feast Cross-Origin Resource Sharing vulnerability
Feast Cross-Origin Resource Sharing vulnerability
▾ Twilightfeast · feastEPSS 0.30%via OSV