@stackflag.bsky.socialCVE-2026-55563 - feast
Feast versions before 0.65.0 run test scripts from external contributors using a workflow that keeps approval labels even after code changes. This lets a malicious contributor execute…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-92787 - feast
Feast version 0.66 does not check the digital signature on authentication tokens, so anyone can present a crafted token and be treated as an authorized user. This lets the attacker read…
Too many irrelevant or confusing CVEs? Use stackflag.com