feast-dev/feast vulnerabilities

2 known vulnerabilities in feast-dev/feast from Feast-dev. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  feast-dev/feast: Deserialization of Untrusted Data

  CVE-2025-11157Jan 1, 2026Feast-dev

  A high-severity remote code execution vulnerability exists in feast-dev/feast version 0.53.0, specifically in the Kubernetes materializer job located at `feast/sdk/python/feast/infra/compute_engines/kubernetes/main.py`. The vulnerability arises from the use of

• 7.4 High severity

  feast-dev/feast: Origin Validation Error

  CVE-2024-11602Mar 20, 2025Feast-dev

  A Cross-Origin Resource Sharing (CORS) vulnerability exists in feast-dev/feast version 0.40.0. The CORS configuration on the agentscope server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API.