repository icon
feast-dev / feast Project repository

The Open Source Feature Store for Machine Learning

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN30 DAYS

FIX

WITHIN97 DAYS

Hard-coded non-overridable intra-communication secret in Helm chart enables auth...
sythenv
self closed
Unsafe dill.loads() Deserialization in 9 Locations Enables Remote Code Execution...
mom3gool2030
duplicate
None
Arbitrary Code Execution via Unsafe dill Deserialization of UDF Bodies from Feas...
kimkou2024
duplicate
High
Insecure deserialization of UDF registry blobs leads to RCE
ghnimiwael
duplicate
Critical
Arbitrary File Read / Path Traversal
luffybounty18
pending
Arbitrary code execution during YAML config parsing in Kubernetes materializer
al-cybision
High
•CVE-2025-11157
Improper CORS Configuration Allowing Unauthorized Cross-Origin Access
soloplayer140
duplicate
High
SQL injection in PostgreSQL offline store
ehtec
spam
Client-Side Desync Attack: HTTP Request Smuggling Vulnerability in Feast
samr301
not applicable
Client-Side Desync Attack: HTTP Request Smuggling Vulnerability in Feast
samr301
self closed
Remote Code Execution (RCE) in PythonTransformation
cyfra07
informative
Critical
Remote Code Execution (RCE) via Deserialization in Feast GEProfiler
cyfra07
informative
Critical
CORS can leads to expose the sensitive data
mnqazi
High
•$750•CVE-2024-11602