Skip to content
OpenAdvisories

Product · kedro-org

kedro-plugins

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2026-62997

    Kedro-Datasets: Remote code execution in experimental `PyTorchDataset` via unsafe `torch.load`

    Kedro-Datasets provides data connectors for Kedro. From version 5.0.0 until 9.5.0, kedro_datasets_experimental.pytorch.PyTorchDataset in kedro-datasets loads .pt model files with torch.load without enforcing weights_only=True, and user-supplied load_args are …

    kedro-org kedro-plugins