Skip to content
OpenAdvisories

Vendor

kedro-org

8 known vulnerabilities.

Products

kedro-org/kedro 3 kedro-plugins 2 kedro 2 kedro-datasets 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-35171

    Arbitrary Code Execution via Malicious Logging Configuration in Kedro

    Kedro is a toolbox for production-ready data science. Prior to 1.3.0, Kedro allows the logging configuration file path to be set via the KEDRO_LOGGING_CONFIG environment variable and loads it without validation. The logging configuration schema supports the s…

    kedro-org kedro kedro PyPI
  • Critical 9.8
    CVE-2024-9701

    Remote Code Execution in kedro-org/kedro

    A Remote Code Execution (RCE) vulnerability has been identified in the Kedro ShelveStore class (version 0.19.8). This vulnerability allows an attacker to execute arbitrary Python code via deserialization of malicious payloads, potentially leading to a full sy…

    kedro-org kedro-org/kedro kedro PyPI