Repository navigation
Security: feast-dev/feast
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
`pull_request_target` integration tests run untrusted fork code with production cloud secrets; the `ok-to-test` label guard is bypassable via label persistence on `synchronize`GHSA-2j2x-r73g-hrr5 published
Jun 23, 2026 by franciscojavierarceoHigh