Skip to content
OpenAdvisories

Package · PyPI

feast

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-18948

    Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry server

    A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, which are serialized using the 'dill' library. This allows a remote attacker to store a malicious UDF, leading to unauthenticated arbitrary cod…

    Red Hat Red Hat OpenShift AI (RHOAI) Red Hat OpenShift AI 3.4 Red Hat OpenShift AI 3.3 PyPI
  • Critical 9.8
    CVE-2026-56121 Public exploit

    Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization

    Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized attackers to achieve remote code execution by sending a crafted gRPC request to the registry server. The user_defined_function.body field of an On…

    feast-dev feast feast PyPI