CVE-2025-11157 | feast-dev feast up to 0.53.x YAML File Parser main.py yaml.load deserialization

A vulnerability classified as problematic has been found in feast-dev feast up to 0.53.x. Affected by this vulnerability is the function yaml.load of the file feast/sdk/python/feast/infra/compute_engines/kubernetes/main.py of the component YAML File Parser. The manipulation leads to deserialization.

This vulnerability is uniquely identified as CVE-2025-11157. Local access is required to approach this attack. No exploit exists.

It is recommended to upgrade the affected component.