Kedro-Org
6 CVEs across 3 Kedro-Org products. Browse Kedro-Org vulnerabilities, severities, and proof-of-concept exploits.
Kedro-Org products with known CVEs
Kedro-Org CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-3840 | High | 7.1 | 2026-06-12 | A vulnerability in Kedro version 1.2.0 allows an attacker to exploit path traversal by providing a crafted version string. The `_get_versioned_path()` method i… |
CVE-2026-35492 | Medium | 6.5 | 2026-04-07 | Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition ID… |
CVE-2026-35171 | Critical | 9.8 | 2026-04-06 | Kedro is a toolbox for production-ready data science. Prior to 1.3.0, Kedro allows the logging configuration file path to be set via the KEDRO_LOGGING_CONFIG e… |
CVE-2026-35167 | High | 7.1 | 2026-04-06 | Kedro is a toolbox for production-ready data science. Prior to 1.3.0, the _get_versioned_path() method in kedro/io/core.py constructs filesystem paths by direc… |
CVE-2024-9701 | Critical | 9.8 | 2025-03-20 | A Remote Code Execution (RCE) vulnerability has been identified in the Kedro ShelveStore class (version 0.19.8). This vulnerability allows an attacker to execu… |
CVE-2024-12215 | High | 8.8 | 2025-03-20 | In kedro-org/kedro version 0.19.8, the `pull_package()` API function allows users to download and extract micro packages from the Internet. However, the functi… |