Lucene search
+L

23 matches found

OSV
OSV
added 2026/07/07 4:3 p.m.10 views

PYSEC-2026-1366 Feast vulnerable to Deserialization of Untrusted Data

A high-severity remote code execution vulnerability exists in feast-dev/feast version 0.53.0, specifically in the Kubernetes materializer job located at feast/sdk/python/feast/infra/computeengines/kubernetes/main.py. The vulnerability arises from the use of yaml.load..., Loader=yaml.Loader to...

7.8CVSS7.9AI score0.00264EPSS
SaveExploits0References7
Rows per page
Query Builder