Skip to content
OpenAdvisories

Package · PyPI

feast

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Critical 9.9
    CVE-2026-18948

    Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry server

    A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, which are serialized using the 'dill' library. This allows a remote attacker to store a malicious UDF, leading to unauthenticated arbitrary cod…

    Red Hat Red Hat OpenShift AI (RHOAI) Red Hat OpenShift AI 3.4 Red Hat OpenShift AI 3.3 PyPI
  • Critical 9.8
    CVE-2026-56121 Public exploit

    Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization

    Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized attackers to achieve remote code execution by sending a crafted gRPC request to the registry server. The user_defined_function.body field of an On…

    feast-dev feast feast PyPI
  • High 7.8
    CVE-2025-11157

    Arbitrary Code Execution in feast-dev/feast

    A high-severity remote code execution vulnerability exists in feast-dev/feast version 0.53.0, specifically in the Kubernetes materializer job located at `feast/sdk/python/feast/infra/compute_engines/kubernetes/main.py`. The vulnerability arises from the use o…

    feast-dev feast-dev/feast feast PyPI
  • High 7.4
    CVE-2024-11602

    CORS Vulnerability in feast-dev/feast

    A Cross-Origin Resource Sharing (CORS) vulnerability exists in feast-dev/feast version 0.40.0. The CORS configuration on the agentscope server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API.…

    feast-dev feast-dev/feast feast PyPI