Known vulnerabilities in feast
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-92787 | Feast through 0.66.0 fails to verify JWT token signatures before establishing user identity, allowing attackers to… | 9.3 Critical | Sep 16, 2026 |
| CVE-2026-56121 | Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization | 9.3 Critical | Jun 24, 2026 |