Feast-dev vulnerabilities
Products
Newest
- feast-dev feast Feast: `pull_request_target` integration tests run untrusted fork code with production cloud secrets; the `ok-to-test` label guard is bypassable via label persistence on `synchronize` 8.9 High
- feast-dev feast Feast through 0.66.0 Authentication Bypass via Unverified Token 9.3 Critical
- feast-dev feast, red hat openshift ai (rhoai), openshift ai 3.4 +2 more Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization 9.3 Critical
- feast-dev feast-dev/feast, red hat openshift ai (rhoai), openshift ai 2.25 +2 more Arbitrary Code Execution in feast-dev/feast 7.8 High
- feast-dev feast-dev/feast CORS Vulnerability in feast-dev/feast 7.4 High