PyPI/feast CVE-2025-11157: high 7.8, EPSS 0.30%
Feast vulnerable to Deserialization of Untrusted Data
Action: Upgrade feast to 0.54.0 or later.
pip install feast==0.54.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.54.0 | - |
Fixed versions
| 0.54.0 |
Sources
- osv: PYSEC-2026-1366
- https://nvd.nist.gov/vuln/detail/CVE-2025-11157
- https://github.com/feast-dev/feast/pull/5643
- https://github.com/feast-dev/feast/commit/b2e37ff37953b68ae833f6874ab5bc510a4ca5fb
- https://github.com/feast-dev/feast
- https://huntr.com/bounties/46d4d585-b968-4a76-80ce-872bc5525564
- https://pypi.org/project/feast
- https://github.com/advisories/GHSA-34wm-4hw7-qfjv
CVE-2025-11157 · published · modified · JSON