Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/01/01 9:30 a.m.12 views

Feast vulnerable to Deserialization of Untrusted Data

A high-severity remote code execution vulnerability exists in feast-dev/feast version 0.53.0, specifically in the Kubernetes materializer job located at feast/sdk/python/feast/infra/computeengines/kubernetes/main.py. The vulnerability arises from the use of yaml.load..., Loader=yaml.Loader to...

7.8CVSS8.3AI score0.00268EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder