kedro-org

Products

ProductCVEsExploitedLatest
kedro-org/kedro3–Jun 12, 2026
kedro2–Apr 6, 2026
kedro-plugins2–Sep 16, 2026
kedro-datasets1–Oct 15, 2026

Exploited and recent CVEs

  • CVE-2026-111170 Medium 6.5 kedro-datasets 9.3.0 through 9.6.0 Path Traversal via MatplotlibDataset Plot Name 0.4%
  • CVE-2026-62997 High 7.7 Kedro-Datasets: Remote code execution in experimental `PyTorchDataset` via unsafe `torch.load` 0.7%
  • CVE-2026-3840 High 7.1 Path Traversal in kedro-org/kedro 0.2%
  • CVE-2026-35492 Medium 6.5 Kedro-Datasets has a path traversal vulnerability in PartitionedDataset allows arbitrary file write 0.4%
  • CVE-2026-35171 Critical 9.8 Arbitrary Code Execution via Malicious Logging Configuration in Kedro 0.7%
  • CVE-2026-35167 High 7.1 Kedro has a path traversal in versioned dataset loading via unsanitized version string 0.3%
  • CVE-2024-12215 High 8.8 Remote Code Execution in kedro-org/kedro 1.1%
  • CVE-2024-9701 Critical 9.8 Remote Code Execution in kedro-org/kedro 1.1%