HIGH 7.4 PyPI
Feast Cross-Origin Resource Sharing vulnerability
GHSA-wxpc-2674-rxvw · CVE-2024-11602 · PYSEC-2026-1367
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
A Cross-Origin Resource Sharing (CORS) vulnerability exists in feast-dev/feast version 0.40.0. The CORS configuration on the agentscope server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API. This can bypass intended security controls and potentially expose sensitive information.
Ready to move
Start Securing
Free, no credit card | First findings in minutes