Kedro-org vulnerabilities
We track 6 vulnerabilities in Kedro-org products across 3 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2026.
Latest Kedro-org vulnerabilities
- 7.7 High severity
kedro-plugins: Deserialization of Untrusted Data
Kedro-Datasets provides data connectors for Kedro. From version 5.0.0 until 9.5.0, kedro_datasets_experimental.pytorch.PyTorchDataset in kedro-datasets loads .pt model files with torch.load without enforcing weights_only=True, and user-supplied load_args are s
- 7.1 High severity
kedro-org/kedro: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in Kedro version 1.2.0 allows an attacker to exploit path traversal by providing a crafted version string. The `_get_versioned_path()` method in `kedro/io/core.py` directly interpolates user-supplied version strings into filesystem paths withou
- 9.8 Critical severity
kedro: Improper Control of Generation of Code
Kedro is a toolbox for production-ready data science. Prior to 1.3.0, Kedro allows the logging configuration file path to be set via the KEDRO_LOGGING_CONFIG environment variable and loads it without validation. The logging configuration schema supports the sp
- 8.1 High severity
kedro: Improper Limitation of a Pathname to a Restricted Directory
Kedro is a toolbox for production-ready data science. Prior to 1.3.0, the _get_versioned_path() method in kedro/io/core.py constructs filesystem paths by directly interpolating user-supplied version strings without sanitization. Because version strings are use
- 9.8 Critical severity
kedro-org/kedro: Deserialization of Untrusted Data
A Remote Code Execution (RCE) vulnerability has been identified in the Kedro ShelveStore class (version 0.19.8). This vulnerability allows an attacker to execute arbitrary Python code via deserialization of malicious payloads, potentially leading to a full sys
- 8.8 High severity
kedro-org/kedro: Improper Control of Generation of Code
In kedro-org/kedro version 0.19.8, the `pull_package()` API function allows users to download and extract micro packages from the Internet. However, the function `project_wheel_metadata()` within the code path can execute the `setup.py` file inside the tar fil