Linuxfoundation Kedro
3 CVEs affecting Linuxfoundation Kedro. Latest disclosed: 2026-06-12. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-35171 | Critical | 9.8 | 2026-04-06 | Kedro is a toolbox for production-ready data science. Prior to 1.3.0, Kedro allows the logging configuration file path to be set via the KEDRO_LOGGING_CONFIG e… |
CVE-2026-3840 | High | 7.1 | 2026-06-12 | A vulnerability in Kedro version 1.2.0 allows an attacker to exploit path traversal by providing a crafted version string. The `_get_versioned_path()` method i… |
CVE-2026-35167 | High | 7.1 | 2026-04-06 | Kedro is a toolbox for production-ready data science. Prior to 1.3.0, the _get_versioned_path() method in kedro/io/core.py constructs filesystem paths by direc… |